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1. INTRODUCTION 


We must reason and act in an uncertain world. There may be uncertainty about 
the state of the world, uncertainty about the effects of our actions, and uncertainty 
about other agents’ actions. The standard approach to modeling uncertainty is 
probability theory. In recent years, researchers, motivated by varying concerns in¬ 
cluding a dissatisfaction with some of the axioms of probability and a desire to 
represent information more qualitatively, have introduced a number of general¬ 
izations and alternatives to probability, such as Dempster-Shafer belief functions 
JShafer 1976 ] and possibility theory Dubois and Prade 199C]. Our aim here is to 
introduce what is perhaps the most general approach possible, which uses what we 
call plausibility measures. A plausibility measure associates with a set a plausibility , 
which is just an element in a partially ordered space. The only property that we 
impose is that the plausibility of a set be at least as large as the plausibility of any 
of its subsets. Every systematic approach for dealing with uncertainty that we are 
aware of can be viewed as a plausibility measure. Given how little structure we have 
imposed on plausibility measures, this is perhaps not surprising. Nevertheless, as 
we hope to demonstrate in this and other papers, plausibility measures provide us 
with a natural setting in which to examine various approaches to reasoning about 
uncertainty. 

The focus of this paper is (propositional) default reasoning. There have been 
many approaches to default reasoning proposed in the literature (see [Ginsberg 


1987; Gabbay et al. 1993] for overviews). The recent literature has been guided by 


a collection of axioms that have been called t he KL M properties (since they were 
discussed by Kraus, Lehmann, and Magidor [1990]), and man y of the recent ap¬ 
proaches to de fault reasonin g, including preferential stru c tures ]Kraus et al. 199C ; 
Bhoham 1987 1 , e-semantics [Adams 1975 ; Geffner 1992b ; Pearl 198£], possibilistic 
structures | Dubois and Prade 1991 [, and n-rankings | Goldszmidt and Pearl 1992 ; 
Spohn 198 §j] , have been shown to be characterized by these properties. This has 
been viewed as somewhat sur prisin g, since these approaches seem to capture quite 
different intuitions. As Pearl (|l989 ] said of the equivalence between e-semantics and 
preferential structures, “It is remarkable that two totally different interpretations 
of defaults yield identical sets of conclusions and identical sets of reasoning machin¬ 
ery.” As we shall show in this paper, plausibility measures help us understand why 
this should be so. 


In fact, we show much more. All of these approaches can be understood as giving 
semantics to defaults by considering a class V of structures (preferential structures, 
possibilistic structures, etc.). A default d is then said to follow from a knowledge 
base A of defaults if all structures in V that satisfy A also satisfy d. We define a 
notion of qualitative plausibility measure , and show that the KLM properties are 
sound in a plausibility structure if and only if it is qualitative. Moreover, as long as 
a class V of plausibility structures satisfies a minimal richness condition, we show 
that the KLM properties will completely characterize default reasoning in V. We 
then show that when we map preferential structures (or possibilistic structures or 
any of the other structures considered in the literature on defaults) into plausibility 
structures, we get a class of qualitative structures that is easily seen to satisfy 
the richness condition. This explains why the KLM axioms characterize default 







































Plausibility Measures and Default Reasoning 


3 


reasoning in all these frameworks. Far from being surprising that the KLM axioms 
are complete in all these cases, it is almost inevitable. 

The KLM properties have been viewed as the “conservative core” of default 
reasoning [Pearl 1989], and much recent effort has been devoted to finding principled 
methods of going beyond KLM. Our result suggests that it will be difficult to find 
an interesting approach that gives semantics to defaults with respect to a collection 
V of structures and goes beyond beyond KLM. This result thus provides added 
insight into and justification for approaches such as those of [Bacchus et al. 1993; 
Geffner 1992a| Goldszmidt and Pearl 1992; Goldszmidt et al. 1993; Lehmann and 
Magidor 1992; Pearl 1990|| that, roughly speaking, say d follows from A if d is true 


in a particular structure P/\ G V that satisfies A (rather than requiring that d be 
true in all structures in V that satisfy A). 

This paper is organized as follows. In Section 0, we introduce plausibility mea¬ 
sures and show how they generalize various other proposals for capturing uncer¬ 
tainty. In Section 0, we review the KLM properties and various approaches to 
default reasoning that are characterized by these properties. In Section [|, we show 
how the various notions of default reasoning considered in the literature can all 
be viewed as instances of plausibility measures. In Section 0, we prove our main 
results: we define qualitative plausibility structures, show that the KLM proper¬ 
ties are sound in a structure if and only if it is qualitative, and provide a weak 
richness condition that is necessary and sufficient for them to be complete. In Sec¬ 
tions 0. and 0, we expand on three independent topics related to our results. 
In Section 0, we show that qualitative plausibility measures are more expressive 
than previous semantics considered in the literature. In Section 0, we consider re¬ 
lated work, focusing on the relationship between our approach to plausibility and 
epistemic entrenchment [Gardenfors and Makinson 1988; Gardenfors and Makinson 
1986; Grove 198S[|. In Section N. we discuss how plausibility measures can be used 


to give semantics to a full logic of conditionals, and compare this with the more 
traditional approach [Lewis 19731. We conclude in Section 0 with a discussion of 
other potential applications of plausibility measures. 


2. PLAUSIBILITY MEASURES 

A probability space is a tuple (IK, T, pi), where IK is a set of worlds, T is an 
algebra of measurable subsets of W (that is, a set of subsets closed under union and 
complementation to which we assign probability), and pi is a probability measure, 
that is, a function mapping each set in T to a number in [0,1] satisfying the well- 
known Kolmogorov axioms (/r(0) = 0, p{W) = 1, and p(A U B) = pi(A) + t-i(B) if 
A and B are disjoint).^] 

A plausibility space is a direct generalization of a probability space. We simply 
replace the probability measure /i by a plausibility measure PI that, rather than 
mapping sets in T to numbers in [0,1], maps them to elements in some arbitrary 
partially ordered set. We read P1(A) as “the plausibility of set A”. If P1(A) < 
Pl(-B), then B is at least as plausible as A. Formally, a plausibility space is a tuple 
S = ( W , T, PI), where IK is a set of worlds, T is an algebra of subsets of W, and PI 


1 Frequent ly it is also assumed that // satisfies countable additivity , i.e., if A ,. i > 0, are pairwise 
disjoint, then /i((J. A;) = . p{Ai). 
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maps the sets in T to some set D , partially ordered by a relation <£> (so that <d is 
reflexive, transitive, and anti-symmetric). We assume that D is pointed , that is, it 
contains two special elements T u and J_£> such that J d <d T d for all d £ D\ 
we further assume that P1(W) = T d and P1(0) =J_d. The only other assumption 
we make is 


Al. IfACB, then P1(A) < D PI (B). 


Thus, a set must be at least as plausible as any of its subsets. 

Some brief remarks on the definition: We have deliberately suppressed the do¬ 
main D from the tuple S , since the choice of D is not significant in this paper. All 
that matters is the ordering induced by <d on the subsets in .A.f] As usual, we 
define the ordering <p by taking d\ <d g?2 if d\ <d d-2 and d\ ^ c?2- We omit 
the subscript D from <£>, <d, T d, and ip whenever it is clear from context. We 
also frequently omit the T when describing a plausibility space when its role is not 
that significant, and just denote a plausibility space as a pair (IT, PI) rather than 
(H'.WPl). 

Clearly plausibility spaces generalize probability spaces. We now briefly discuss 
a few other notions of uncertainty that they generalize: 


- A belief function Be l on W is a function Bel : 2 W —> [0,1] satisfying certain 
axioms [Shafer 19761. These axioms certainly imply property Al, so a belief 
function is a plausibility measure. 

A fuzzy measure (or a Sugeno measure) f on W [Wang and Klir 19921 is a 
function / : 2 W i—> [0,1], that satisfies Al and some continuity constraints. A 
possibility measure [ pubois and Prade 1990 Poss is a fuzzy measure such that 
Poss(IT) = 1, Poss(0) = 0, and Poss(A) = sup^g^Poss^ic}). 

—An ordinal ranking (or K-ranking) k on W (as defined by Goldszmidt and 
Pearl 1992j| , based on ideas that go back to |Spohn 198 j ]) is a function map¬ 


ping subsets of W to IN* = IN U {oo} such that k(W) = 0, k( 0) = oo, and 
k(A) = min u , e A(K({ui})). Intuitively, an ordinal ranking assigns a degree of 
surprise to each subset of worlds in W, where 0 means unsurprising and higher 
numbers denote greater surprise. It is easy to see that if k is a ranking on W, 
then (W, k) is a plausibility space, where x y if and only if y < x under the 

usual ordering on the ordinals. 

A preference ordering on W is a strict partial order -< over W Kraus et al. 199C; 
Bhoham 1987[] . Intuitively, w -< w' holds if w is preferred to Preference 
orders have been used to provide semantics for default (i.e., conditional) state¬ 
ments. In Section [| we show how to map preference orders on W to plausibility 
measures on lb in a way that preserves the ordering on worlds as well as the 
truth values of defaults. 

A parameterized probability distribution (PPD) on W is a sequence (Pr,; : i > 0} 
of probability measures over W. Such structures provide semantics for defaults 


2 In dealing with c onditional plausibility, the domain D plays a more significant role [Friedman 
and Halpern 1995 . 

1 We follow the standard notation for preference here [ Lewis 1973| ; Kraus et al. I99C], which uses 
the (perhaps confusing) convention of placing the more likely (or less abnormal) world on the left 
of the -< operator. 
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in e-semantics [Pearl 1989; Goldszmidt et al. 19931. In Section we show how 
to map PPDs on W to plausibility measures on IP in a way that preserves the 
truth-values of conditionals. 

Plausibility structures are motivated by much the same concerns as two other 


recent symbolic generalizations of probability by Darwiche [1992] and Weydert 
[19941]. Their approaches have a great deal more structure though. They start 
with a domain D and several algebraic operations that have properties similar to 
the usual arithmetic operations (e.g., addition and multiplication) over [0,1]. The 
result is an algebraic structure over the domain D that satisfies various properties. 
Their structures are also general enough to capture all of the examples above except 
preferential orderings. These orderings cannot be captured precisely because of the 
additional structure. Moreover, as we shall see, by starting with very little structure 
and adding just what we need, we can sometimes bring to light is sues that may 
be obscured in richer frameworks. We refer the interested reader t o |Friedman and 
Halpern 1995 [ for a more detailed comparison to [ Darwiche 1992 ; Weydert 1994b [. 

Given the simplicity and generality of plausibility measures, we were not surprised 
to discover that Weber 119911 recently defined a notion of uncertainty measures , 
which is a slight generalization of plausibility meas ure (in that domains more general 
than algebras of sets are allowed), and that Greco 1987 ] defined a notion of L-fuzzy 
measures which is somewhat more restricted than plausibility measures in that the 
range I? is a complete lattice. We expect that others have used variants of this 
notion as well, although we have not found any further references in the literature. 
To the best of our knowledge, we are the first to carry out a systematic investigation 
of the connection between plausibility measures and default reasoning. 


3. APPROACHES TO DEFAULT REASONING: A REVIEW 


Defaults are statements of the form “if 0 then typically/likely/by default 0”, which 
we denote 0—>0. For example, the default “birds typically fly” is represented 
Bird — >Fly. Formally, we assume that there is a “base” language £, defined over a 
set $ of propositions, that includes the usual propositional connectives, A, V, ->, => 
and has a consequence relation l-£. The language of defaults £def contains state¬ 
ments of the form 0—>0, where 0, 0 G £. 

There has been a great deal of discussion in the literature as to what the appro¬ 
priate semantics of defaults should be, and what new defaults should be entailed 
by a knowledge base of defaults. For the most part, we do not get into these issues 
here. While there has been little consensus on what the “right” semantics for de¬ 
faults should be, there has been some consensus on a reasonable “core” of inference 


rules for default reasoning. This core, known as the KLM properties [Kraus et al. 


199C ], consists of the following axiom and rules of inference. 


LLE. If \~c 0 <=> <j>', then from 0 — >0 infer 0 ' — >0 (left logical equivalence) 
RW. If \~c 0 =>■ 0 , ) then from <f> — >0 infer 0— > 0 ' (right weakening) 

REF. (f >—»0 (reflexivity) 

AND. From 0—>0i and 0—>02 infer 0—>0i A 02 


OR. From 0 1 —>0 and 02—>0 infer 0i V 02—>-0 

CM. From 0—>0i and 0—>02 infer 0 A 02—>0i (cautious monotonicity) 
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LLE states that the syntactic form of the antecedent is irrelevant. Thus, if <p 1 and (p 2 
are equivalent, we can deduce fa — tip from fa — tip. RW describes a similar property 
of the consequent: If ip (logically) entails fa, then we can deduce <p—>fa from (p — tip. 
This allows us to can combine default and logical reasoning. REF states that <p 
is always a default conclusion of <p. AND states that we can combine two default 
conclusions: If we can conclude by default both fa and fa from <p, then we can also 
conclude fa A fa from </>. OR states that we are allowed to reason by cases: If the 
same default conclusion follows from each of two antecedents, then it also follows 
from their disjunction. CM states that if fa and fa are two default conclusions of 
(p, then discovering that fa holds when (p holds (as would be expected, given the 
default) should not cause us to retract the defa ult conclusion ip 1 . 

This system of rules is called system P in [ Kraus et al. 1990 ]. The notation 
A b P <p—fa denotes that (p—fa can be deduced from A using these inference rules. 

There are a number of well-known semantics for defaults that are characterized 
by these rules. We sketch a few of them here, referring the reader to the orig¬ 
inal references for further details and motivation. All of these semantics involve 
structures of the form (IF, X, n), where IF is a set of possible worlds, n(w) is a 
truth assignment consistent with \~c to formulas in C , and X is some “measure” 
on IF such as a preference ordering, a K-ranking, or a possibility measure. We 
define a little notation that will simplify the discussion below. Given a structure 
M = (IF, X, 7r) and a formula <p G £, we take \<P\m Q IF to be the set of worlds 
satisfying <p, i.e., [</>]m = {w £ IF : 7 r(w){<p) = true}. We omit the subscript M 
when it plays no role or is clear from the context. 


The first semantic propos al was provided by Kraus, Lehmann and M agidor 1 199C ], 
using ideas that go back to Hansson 1969| ; Lewis 1973 ; |5hoham 1987 1. Recall that 
a preference ordering on W is strict partial order (i.e., an irreflexive and transitive 
relation) -< over IF. A preferential st ructure is a tu ple (IF, —<, 7r), where Y is a strict 
partial order on IF.^j The intuition [ Shoham 1987(1 is that a preferential structure 
satisfies a conditional <p—tip if all the most preferred worlds (i.e., the minimal worlds 
according to -<) in [</>] satisfy ip. However, there may be no minimal worlds in [</>]. 
This can happen if [</>] contains an infinite descending sequence ... -< W 2 < w 1 . 
What do we do in these structures? There are a number of options: the first is to 
assume that, for each formula <p, there are minimal worlds in [</>] whenever [(/>] is 
not empty; this is the assumption actually made in [Kraus et al. 199C], where it is 
called the smoothness assumption. A yet more general definition—one that works 
even if -< is not smooth—is given in [Bossu and Siegel 1985; Boutilier 1994; Lewis 


1973]. Roughly speaking, <p—tip is true if, from a certain point on, whenever <p is 


true, so is ip. More formally, 


(IF, -<, 7r) satisfies <p—tip if, for every world w\ G [^], there is a world W 2 


4 We note that th e formal definition of preferential structures in 
and Magidor 1 992f is slightly more complex. Kraus, Lehmann, and 
states and worlds. In their definition, a preferential structure is an ordering over states together 
with a labeling function that maps states to worlds. They take worlds to be truth assignments to 
primitive propositions. Our worlds thus correspond to states in their terminology, since we allow 
two worlds w ^ w' such that ir(w) = ir(w'). Despite these minor differences, all the results that 
we prove for our version of preferential structures hold (with almost no change in proof) for theirs. 


Kraus et al. 1990; Lehmann 


Magidor distinguish between 
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such that (a) w 2 -< w± (i.e., either W2 < w\ or W2 = w\ ) (b) W2 G \<pAip\, 
and (c) for all worlds W3 -< W2, we have W3 € \<p =>• ip\ (so any world 
more preferred than W 2 that satisfies (p also satisfies ip). 


It is easy to verify that this definition is equivalent to the earlier one if -< is smooth. 
A knowledge-base A preferentially entails <p — np, denoted A |= p <p — >ip, if every 
preferential structure that satisfies (all the defaults in) A also satisfies (p — up. 

Lehmann and Magidor show that preferential entailment is characterized by sys¬ 
tem P. 


Theorem 3.1. [ Lehmann and Magidor 1992 ; Boutilier 1994 [ A |= p <p — >ip if and 
only if A bp 1 p — yip. 


Thus, reasoning with preferential structures corresponds in a precise sense to rea¬ 
soning with the core properties of default reasoning. 

As we mentioned earlier, we usually want to add additional inferences to those 
sanctioned by the core. Lehmann and Magidor [ 1992] hoped to do so by restricting 
to a special class of preferential structures. A preferential structure (W,~<,ir) is 
rational if -< is a modular order, so that for all worlds u,v,w E W, if w -< v, 
then either u -< v or w -< u. It is not hard to show that modularity implies that 
possible worlds are clustered into equivalence classes, each class consisting of worlds 
that are incomparable to one another, with these classes being totally ordered. 
Thus, rational structures form a “well-behaved” subset of preferential structures. 
Unfortunately, Lehmann and Magidor showed that restricting to rational structures 
gives no additional properties (at least, as far as the limited language of defaults 
is concerned). We say that a knowledge base A rationally entails <p — >ip, denoted 
A |= r <p — >ip, if every rational structure that satisfies A also satisfies (p —> v>0 


Theorem 3.2. [Lehmann and Magidor 1992] A |= r (p — yip if and only if A b 


cp^ip. 


Thus, we do not gain any new patterns of default inference when we restrict our 
attention to rational structures. 

This is perhaps somewhat surprising, since it is is known that rational structures 


do satisfy the following additional property, known as rational monotonicity [ Kraus 


et al. 1990; Lehmann and Magidor 1992]: 
RM If (p—>ipi and (p-/y~<ip2 then cp A ip2—> 


ipi 


Note that RM is almost the same as CM, except that <p — >ip2 is replaced by the 
weaker <p-/+~iip2- 

How can the existence of this additional property be consistent with the fact both 
that rational and preferential structures are characterized by system P? The key 
point is that although RM is an additional property satisfied by rational structures, 
it is not one that is expressible in the language of defaults (because we do not allow 
negated defaults). As we shall see in Section ||, once we move to a richer language, 
rational structures are distinguishable form arbitrary preferential structures. 


5 Rational entailment sh ould not be confused with the notion of rational closure, also defined by 


Lehmann and Magidor [ 1992 
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Pearl Jl989 | considers a semantics for defaults grounded in probability, using an 
approach due to Adams [ 1975| ]. In this approach, a default 0—►?/> denotes that 
Pr(0|0) is extremely high, i.e., almost 1. Roughly speaking, a collection A of 
defaults implies a default 0 —yip if we can ensure that Pr(0|0) is arbitrarily close to 
1, by taking the probabilities of the defaults in A to be sufficiently high. 

The formal definition needs a bit of machinery]^] Recall that a PPD on VP is a 
sequence {Prj : i > 0} of probability measures over W. A PPD structure is a tuple 
(IT, {Prj : i > 0}, 7r), where {Pr,} is PPD on W. Intuitively, it satisfies a conditional 
0 —>ip if the conditional probability 0 given 0 goes to 1 in the limit. Formally, 
0 —tip is satisfied if linp^^ Prj([0]|[0]) = 1 (where Prj([0]|[0]) is taken to be 1 if 
Prj([01) = 0). A e-entails 0— >-0, denoted A |= e 0— >0, if every PPD structure that 
satisfies all the defaults in A also satisfies 0 —>0. Surprisingly, Geffner shows that 
e-entailment is equivalent to preferential entailment. 


Theorem 3.3. [Geffner 1992b| A |= e 0—>0 if and only if A bp 0- 


Possibility measures and ordinal rankings provide two more semantics for de¬ 
faults. A possibility structure is a tuple PS = (IT, Poss, n) such that Poss is a 
possibility measure on W. We say PS {=_p OS s 0—>0 if either Poss([0]) = 0 or 
Poss([0 A 0]) > Poss([0 A -i0|). Intuitively, 0—>-0 holds vacuously if 0 is impos¬ 
sible; otherwise, it holds if 0 A 0 is more “possible” than 0 A -i0. For example, 
Bird—>Fly is satisfied when Birdl\Fly is more possible than Bird/\~<Fly. Similarly, 
an ordinal ranking structure is a tuple R = (IT, k, tt) if k is an ordinal ranking on 
IT. We say that R \= K 0—>0 if either k([ 0]) = oo or k([0A0]) < k([ 0A->0]). We 
say that A possibilistically entails 0—>-0, denoted A |=p oss 0 —>ip (resp., A K-entails 
0—>0, denoted A J= K 0—>0) if all possibility structures (resp., all ordinal ranking 
structures) that satisfy A also satisfy 0^0. 

These two approaches are again characterized by the KLM properties. 


Theorem 3.4. 
alent: 


[Geffner 1992b; Dubois and Prade 1991 The following are equiv- 


(a) A |=p oss 0 *0 

(b) A \= K 0—>0 

(c) A bp 0 — yip. 

Why do we always seem to end up with the KLM properties? As we are about to 
show, thinking in terms of plausibility measures provides the key to understanding 
this issue. 


4. DEFAULT REASONING USING PLAUSIBILITY 

We can give semantics to defaults using plausibility measures much as we did using 
possibility measures. A plausibility structure (for C) is a tuple PL = (W, T, PI, n), 
where (IT, F, PI) is a plausibility space and n maps each possible world to a truth 


6 We adopt the presentation used in [Goldszmidt et al. 1993 . 

7 Geffner’s r esult is stated in ter ms of the original form ulation of e-entailment, as described in 


Pearl 19891. However, results of [Goldszmidt et al. 199^ 


show that the formulation we describe 


here is equivalent to the original one. 
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assignment to the formulas in C that is consistent with I ~c in the obvious sense. 
Since we will be interested in events that correspond to formulas, we require that 
[<^J £ T for all formula <fi £ C. For ease of exposition, when describing a plausibility 
structure for C , we assume that T = {[</>] : cj) £ £}. Just as with plausibility spaces, 
we typically omit the algebra T from the description of a plausibility structure. We 
define PL \=pl if either P1([0J) =_L or P1([0 A ipj) > Pl([^> A -^])- 

Notice that if PI is a probability function Pr, then (f>— ^ holds exactly if either 
Pr([</>]) = 0 or PrQV’HM) > 1/2. How does this semantics for defaults compare to 
others that have been given in the literature? It is immediate from the definitions 
that the semantics we give to defaults in possibility structures is the same as that 
given to them if we view these possibility structures as plausibility structures (using 
the obvious mapping described in Section ||), and similarly for ordinal ranking 
structures. What about preferential structures and PPD structures? Can we map 
them into plausibility structures while still preserving the semantics of defaults? 
As we now show, we can. 

In fact, Lemma 4.1 shows that there is a general procedure for mapping any 
approach that satisfies the KLM postulates to plausibility measures. Before de¬ 
scribing this general construction, we briefly sketch its instantiation in the case of 
PPDs and preferential structures. 

We start with PPDs. Let PP = (W, {Pr,},7r) be a PPD structure. Let Plpp be 
a plausibility measure on W such that 


Plpp(A) < PI pp(B) if and only if lim Pri(B\A U B) = 1. (1) 

i —►oo 

It is easy to check that such a plausibility measure exists and that (W,Plpp,7r) 
satisfies the same defaults as PP. We note that this construction, as well as others 
in the remainder of the paper, specifies only the relative order of plausibilities of 
events, and does not describe the domain of plausibility values. It is easy to check 
that as long as the ordering constraints are consistent with reflexivity, transitivity, 
and Al, we can always construct a matching plausibility domain.^] From here on, 
we treat such ordering constraints as though they define a plausibility measure. 

We stress that this embedding, which is sufficient for the purpose of this work, 
is not the only one possible. To see this, suppose that A and B are disjoint sets 
such that Piy(A) = Pr i{B) for all i. One might argue that the plausibility of A and 
B should be equal. Yet our definition would make P1(A) and P1(B) incomparable 
since Pri(H|A U B) = 0.5 for all i. 

The construction for mapping preferential structures into plausibility structures 
is slightly more complex. Suppose we are given a preferential structure (W, —7r). 
Let Dq be the domain of plausibility values consisting of one element d w for every 
element w £ W. We use -< to determine the order of these elements: d v < d w if 
w A v. (Recall that w A w' denotes that w is preferred to w'.) We then take D to 
be the smallest set containing Dq closed under least upper bounds (so that every 
set of elements in D has a least upper bound in D). It is not hard to show that 
D is well-defined (i.e., there is a unique, up to renaming, smallest set) and that 
taking P1 X (A) to be the least upper bound of {d w : w £ A} gives us the following 


8 For example, we can take the domain of the plausibility measure to consist of sets of logically 
equivalent formulas, partially ordered so as to satisfy the constraints. 
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property: 

PU(A) < Pl^(i?) if and only if for all w £ A — B, there is a world 
w' £ B such that w' < w and there is no w" £ A — B such that (2) 

w" -< w'. 

Again, it is easy to check that (VP,Pl^,7r) satisfies the same defaults as (W, Y,7r). 
We now present our general construction. 

Lemma 4.1. Let W be a set of possible worlds and let tt be a function that maps 
each world in W to a truth assignment to C. Let T C £ de f be a set of defaults that 
is closed under the rules of system P that satisfies the following condition: 


(*) if e T, [0] = [</>'], and 

formulas ft, ft', if, ip' £ C. 


= \ip'\, then ft' —*ip' £ T, for all 


There is a plausibility structure PLp = {W,P\t,tt) such that Ply ([</>]) < P1 t(M) 
if and only if ft V ip—>ip £ T. Moreover, PLp \= ft — >ip if and only if ft—rip £ T. 


Proof. See Appendix A.l. □ 


Theorem 4.2. (a) Let PP = {Pr^} be a PPD on W. There is a plausibility 
measurePlpp onW such that (W, {Pr;}, tt) |= e ft — rft if and only if (W,P\pp,Tr) \=pl 
ft^ip. 

(b) Let -< be a preference ordering on W. There is a plausibility measure Pl^ on 
W such that (W, if) \= p ft — >ip if and only if (W, Pl^, tt) \=pl ft — >ip- 


Proof. We start with part (a). Set Tp_p = {ft—*ip : (W,PP,-k) ft—*ip}. 
Theorem 3.3 implies that Tpp is closed under the KLM rules. Moreover, sin ce T is 
constructed from a PPD over W using n it satisfies the requirement of Lemma m p 
follows that we can construct a plausibility structure that satisfies the requirements 
of the theorem. It is also easy to verify that this construction agrees with the 
construction described earlier, in that it satisfies constraint (Q). To see this, let 
A, B £ T. Then, according to our assumptions, there are formulas ft and ip such 
that A = [</>] and B = [^J. By definition, Plpp(A) < PI pp{B) if and only if 
(IT, PP, n) |= e (ft V ip)—*ip. From definition of |= e we immediately get (|l|). 

The proof of part (b) is identical, using Theorem |3.l[ Again, an analogous 
argument easily shows that Pl^ satisfies dD- □ 

Thus, each of the semantic approaches to default reasoning that were considered 
in Section |] can be mapped into plausibility structures in a way that preserves 
the semantics of defaults. We remark that these mapping are not unique. For 


example, Freund [ 1996 ] gives an alternative mapping from preferential structures 
to plausibility measures. 

Other semantics for defaults c an a lso be mapped into plausibility measures using 
the general technique of Lemma 4.1. In most cases, we can also establish a direct 
relationship between these semantics and plausibility measures. For example, the 
coherent filters approach of [Ben-David and Ben-Eliyahu 1994; Schlechta 1995] can 
be mapped to plausibility, as shown by Schlechta [1996], and Weydert’s full ranking 
measures [ 1994a] are easily seen to be a special case of plausibility measures. 
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5. DEFAULT ENTAILMENT IN PLAUSIBILITY STRUCTURES 


In this section we characterize default entailment in plausibility structures. To 
do so, it is useful to have a somewhat more general definition of entailment in 
plausibility structures. 


Definition 5.1. If S is a class of plausibility structures, then a knowledge base 
A entails (p —►V’ with respect to S, denoted A |=$ <j> — yip, if every plausibility struc¬ 
ture PL £ S that satisfies all the defaults in A also satisfies <j> — up. | 


The classes of structures we are interested in include S PL , the class of all plausibility 
structures, and S Poss , <S K , S p , S r , and S e , the classes that arise from mapping 
possibility structures, ordinal ranking structures, preferential structures, rational 
structures, and PPDs, respectively, into plausibility structures. (In the case of 
possibility structures and ordinal ranking structures, the mapping is the obvious 
one discussed in Section ^]; in the case of preferential, rational and PPD structures, 
the mapping is the one described in Theorem 4.2.) Recall that all these mappings 
preserve the semantics of defaults. 

It is easy to check that our semantics for defaults does not guarantee that the 
axioms of system P hold in all structures in S PL . In particular, they do not 
hold in probability structures. For a counterexample, consider a plausibility struc¬ 
ture PL = (W,P1,7r), where PI is actually a probability measure Pr such that 
Pr ([<7 A r]) = 0.2 and Pr(|g A t]) = Pr([-ig A r]) = 0.4. Thus, Pr([g]) = .6 and 
Pr(MIM) = 1/3- Recall that if Pr([0]) > 0, then PL \=pl (p—yip if and only if 


> .5. Thus, PL \=pl ( true — yq) A ( true —»r), but PL\L pL true-^y(q A r) 
and PL\f= PL r — yq. This gives us a violation of both AND and CM. We can simi¬ 
larly construct a counterexample to OR. On the other hand, as the following result 
shows, plausibility structures do satisfy the other three axioms of system P. Let 
system P' be the system consisting of LLE, RW, and REF. 


Theorem 5.2. If A F P / cp^ip, then A j= s PL (p^ip. 


Proof. See Appendix A.2. □ 


What extra conditions do we have to place on plausibility structures to ensure 
that AND, OR, and CM are satisfied? We focus first on the AND rule. We want 
an axiom that cuts out probability functions, but leaves more qualitative notions. 
Working at a semantic level, taking [</>] = A, [i/t] = B\, and [V’ 2 ] = -B 2 , and using 
X to denote the complement of X , the AND rule translates to 


A2'. For all sets A , B\, and B 2l if P1(A 0 B\) > P1(A 0 Bi) and P1(A 0 Bf) > 
P1(A n Lh), then P1(A OBiO B 2 ) > P1(A 0 (BiOBj)). 


It turns out that in the presence of Al, the following somewhat simpler axiom is 
equivalent to A2': 


A2. If A, B , and C are pairwise disjoint sets, Pl(AUR) > P1(C), and Pl(AuC') > 
P1(R), then P1(A) > P1(B U C). 


Proposition 5.3. A plausibility measure satisfies A2 if and only if it satisfies 
A2 1 . 


Proof. See Appendix A.2. □ 






12 


Nir Friedman and Joseph Y. Halpern 


A2 can be viewed as a generalization of a natural requirement of qualitative 
plausibility: if A , B, and C are pairwise disjoint, P1(A) > P1(R), and P1(A) > 
P1(C*), then P1(A) > P1(.B U C). Moreover, since A2 is equivalent to A2', and A2' 
is a direct translation of the AND rule into conditions on plausibility measures, 
any plausibility structure whose plausibility measure satisfies A2 also satisfies the 
AND rule. Somewhat surprisingly, a plausibility measure PI that satisfies A2 also 
satisfies CM. Moreover, PI satisfies the non-vacuous case of the OR rule. That is, 
if Pl([0i]) > J_, then from (pi — *ip and </>2—>V’ we can conclude (cp i V ife)— ►V’-Q To 
handle the vacuous case of OR we need an additional axiom: 


A3. If P1(A) = PI (B) = _L, then P1(A UU)=1. 

Thus, A2 and A3 capture the essence of the KLM properties. To make this precise, 
define a plausibility space (W, PI) to be qualitative if it satisfies A2 and A3 in addi¬ 
tion to Al. We say PL = (W, PI, n) is a qualitative plausibility structure if (W, PI) 
is a qualitative plausibility space. Let S® PL consist of all qualitative plausibility 
structures. 


Theorem 5.4. S C S® PL if and only if for all A, cp, and ip, if A bp <p — >ip then 
A (=5 (p-*ip- 


Proof. 


See Appendix A.2. 


□ 


Thus, the KLM ax iom s are sound for qualitative plausibility structures. We 
remark that Theorem |5.4| provides not only a sufficient but a necessary condition 
for a set of plausibility structures to satisfy the KLM properties: If the KLM axioms 
are sound with respect to S, then all PL £ S must be qualitative. 

This, of course, leads to the question of which plausibility structures are qualita¬ 
tive. All the ones we have been focusing on are. 


Theorem 5.5. Each of S Poss , S K , S £ , S p , and S r is a subset of S® PL . 


Proof. See Appendix A.2. □ 


It follows from Theorems 5.4 and 5.5 that the KLM properties hold in all the 
approaches to default reasoning considered in Section |j. While this fact was already 
known, this result gives us a deeper understanding as to why the KLM properties 
should hold. In a precise sense, it is because A2 and A3 hold for all these approaches. 

We now consider completeness. To get soundness, we have to ensure that S does 
not contain too many structures, in particular, no structures that are not qualita¬ 
tive. To get completeness, we have to ensure that S contains “enough” structures. 
In particular, if A I/p (p — yip, we want to ensure that there is a plausibility structure 
PL £ S such that PL \=pl A and PL\f= PL <p — >ip. The following weak condition on 
S does this. 


9 We remark that if we dropped requirement Al, then we can define properties of plausibilities 
measures that correspond precisely to CM and OR. The point is that in the presence of Al, A2— 
which essentially corresponds to AND—implies CM and the non-vacuous case of OR. Despite 
appearances, Al does not correspond to RW. Semantically, RW says that if A and B are disjoint 
sets such that P1(A) > P1(B), and A C A', B' C B, and A' and B' are disjoint, then Pl(A') > 
P^R'). While this follows from Al, it is much weaker than Al. 
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Definition 5.6. We say that S is rich if for every collection fa,..., 4> n , n > 1, 
of mutually exclusive formulas, there is a plausibility structure PL = {W, PI, n) € S 
such that: 


pi(M) > pi(M) > • • • > pi([<M) = -l. I 


The richness requirement is quite mild. It says that we do not have a priori 
constraints on the relative plausibilities of a collection of disjoint sets. Theorem 5.7 
shows that every collection of plausibility measures that we have considered thus 
far c an b e easily shown to satisfy this richness condition. More importantly, The¬ 
orem 5.8 shows that richness is a necessary and sufficient condition to ensure that 
the KLM properties are complete. 

S K , S p , S r , S e , and S® PL is rich. 


Theorem 5.7. Each of S 


Poss 


Proof. Let fa,. ..,<j> n , n > 1, be mutually exclusive formulas and let W = 
{uq,..., w n -i}. Since fa,. ..,</> n are mutually exclusive, we can construct a map¬ 
ping 7r that maps each world in W to a truth assignment such that \fa\ = Wi for 
all 1 < i < n, and {fa} = 0- Recall that we need to find a plausibility measure PI 
such that Pl([</q]) > Pl([(/> 2 ]) > • • • > P 1([<0n]) = -L- It is easy to find a plausibility 
measure PI satisfying this property such that {W, PI, 7r) is in S Poss , S K , S p , S r , S e , 
or S^ PL . For example, to get a structure in S Poss , we define Poss(wq) = 1 — A 
To get a structure in S p , we define PI to correspond to the preference ordering 
uq -*< w 2 -< ■ ■ ■ -< w n -\. □ 


Theorem 5.8. A set S of qualitative plausibility structures is rich if and only if 
for all finite A and defaults 4> — >ip, we have that A ^5 ( j > —fa implies A bp < f > — yif . 


Proof. See Appendix A.2. □ 


Note that Theorem 5.8 deals with what is usually considered to be weak com¬ 
pleteness. The strong notion of completeness would require us to remove the re¬ 
striction that A is finite from the statement of the theorem. It is possible to find a 
stronger notion of richness that corresponds to strong completeness, but the details 
are somewhat cumbersome, so we do not provide them here. Note that if |=s is 
compact, then weak completeness implies strong completeness. 

Putting together Theorems |Q| , |T5| , and [5.8| , we get 

Corollary 5.9. For S e {S Poss ,S K ,S p ,S r ,S e 1 S QPL }, and all A, fa and if, 
we have A bp (f> —if and only if A |=s q b — fa. 


Not only does this result gives us a straightforward and uniform proof that the 
KLM properties characterize default reasoning in each of the systems considered 
in Section |], it gives us a general technique for proving completeness of the KLM 
properties for other semantics as well. All we have to do is to provide a mapping of 
the intended semantics into plausibility structures, which is usually straightforward, 
and then show that the resulting set of structures is qualitative and rich. 

Theorem |5.8| also has important implications for attempts to go beyond the KLM 
properties (as was the goal in introducing rational structures). It says that any se¬ 
mantics for defaults that proceeds by considering a class S of qualitative structures 
satisfying the richness constraint, and defining A ( f > — fa to hold if < j > — fa is 
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true in every structure in S that satisfies A, cannot lead to new properties for 
ent ailment. 

Thus, to go beyond KLM, we need to either consider interesting non-rich classes 
of structures or to define a notion of entailment from A that does not consider all 
the structures of a given class. We are not aware of any work that takes the first 
approach, although it is possible to construct classes of structures that are arguably 
interesting and violate the richness constraint. One way is to impose independence 
constraints. For example, suppose the language includes primitive propositions p 
and q , and we consider all structures where p is independent of q in the sense that 
if any of true — p —>< 7 , and - 1 p—>q holds, then the others also do. This means that 
discovering either p or ->p does not affect whether or not q is believed.^ Restricting 
to such structures clearly gives us extra properties. For example, from true—>q we 
can infer p —which certainly does not follow from the KLM properties. Such 
structures do not satisfy the richness constraint, since we cannot have, for example, 


Piflb a 9]) > pl (lb A -, gj) > Pi(h? A - , gj) > P Hhp a 1 


Much of the recent work i n default reasoning | Bacchus et al. 1993 ; Geffner 1992a ; 
Goldszmidt and Pearl 1992 ; Goldszmidt et al. 1993 ; Lehmann and Magidor 1992 ; 
Pearl 199C ] has taken the second approach. Roughly speaking, this approach can 
be viewed as taking the basic idea of preferential semantics- placing a preference 
ordering on worlds—one step further: We try to get from a knowledge base a set of 
preferred structures (where the structures themselves put a preference ordering on 
worlds)—for example, in [Goldszmidt et al. 1993], the PPD of maximum entropy is 
considered—and carry out all reasoning in these preferred structures. We believe 
that plausibility measures will provide insight into techniques for choosing such 
preferred structures. For example, we might want to prefer structures where things 
are “as independent as possible”. We believe that it should be possible to capture 
this notion in a reasonable way using plausibility; we defer this to future work. 
(See [Friedman and Halpern 199£] for discussion on independence in the context of 
plausibility.) 


6. EXPRESSIVENESS OF QUALITATIVE PLAUSIBILITY MEASURES 

In the previous section we showed that all approaches to default reasoning are 
instances of qualitative plaus ibili ty structures. We now show that each of the 
classes considered in Theorem 5J5 is a strict subset of S® PL . This is clearly true in 
a trivial sense. For example, if we consider a qualitative plausibility measure whose 
range is [1,2], it cannot be either a possibility measure or a ^-ranking. To get 
around this problem, we define two plausibility spaces (W, PI) and (W, Pi') (resp. 
, two plausibility structures (W, PI, tt) and (W, Pb,^)) to be order-equivalent if for 
A, B C W, we have P1(H) < Pl(-B) if and only if Pl^A.) < P1'(.B). 

We clai m that for each of the classes of plausibility structures considered in The¬ 
orem 5.5, there is a qualitative plausibility structure that is not order-equivalent 
to any element of that class. This is almost immediate in the case of S Poss and 
S K . Since both require < to be a total order, a qualitative plausibility structure 
(W, PI, tt) such that PI does not place a total order on the plausibility of subsets 


10 We remark that if w e define independence approp riately in plausibility structures, this property 


does indeed hold; see [Friedman and Halpern 1995|. 
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cannot be order-equivalent to an element of S Poss or S K . We say a plausibility 
structures (W, PI, 7t) is totally ordered if PI places a total order on subsets. As 
the following proposition show, there are even totally-ordered qualitative plausibil¬ 
ity structures that are not order-equivalent to any possibility structure or ordinal 
ranking structure. 

PROPOSITION 6.1. There is a totally-ordered qualitative plausibility structure 
that is not order-equivalent to any structure in S Poss , S K , S p , or S e . 

Proof. Define a plausibility measure PI on {a, b , c} such that Pl({a}) = Pl({&}) = 
Pl({ c }) = Pl({6, c }) = Pl({a, c}) = 1/2 and Pl({o,6}) = Pl({o,6,c}) = 1. It 
is straightforward to check that PI is qualitative and totally ordered. Moreover, 
we have Pl({c}) < Pl({a,6}), although neither Pl({c}) < Pl({a}) nor Pl({c}) < 
Pl({6}) hold. It is easy to see that there can be no possibility measure, K-ranking, 
preference ordering, or PPD on {a, b , c} such that the corresponding plausibility 
space is order-equivalent to ({a, 6, c}, PI). For example, if Poss is a possibility 
measure on {a, 6, c} such that Poss({c}) < Poss({a,6}, then we must have either 
Poss({c}) < Poss({a} or Poss({c}) < Poss({6}). A similar observation holds for 
K-rankings. This plausibility space also cannot be equivalent to one that arises from 
the construction of Lemma 4.1, since the construction never gives disjoint sets the 
same plausibility. Since Pl({a}) = Pl({6}), the result follows. □ 

If all that we are interested in is default reasoning, then all that matters is the 
relative plausibility of disjoint sets. We say that two plausibility spaces (W. PI) and 
(W, PI') (resp. two plausibility structures (W, PI, n) and (W, PI/t)) are default- 
equivalent if for all disjoint subsets A and B of W, we have P1(A) < P1(I3) if 
and only if Pi'(A) < Pl'(B). Clearly, if structures (W, PI, 7r) and (W, PI 7 ,7r) are 
default-equivalent, then they satisfy the same defaults. 


We can strengthen Proposition 6.1 so that it applies to default-equivalence in the 


case of possibility measures, K-rankings, and preferential orders. 

Proposition 6.2. There is a totally-ordered qualitative plausibility structure 
that is not default-equivalent to any structure in S Poss , S K , or S p . 


Proof. The plausibility space described in the proof of Proposition |6dj also 
provides a counterexample for default-equivalence in the case of S Poss , S K , and 

S p . □ 

Notice that Proposition |6 . 2| does not apply to S e . Consider the PPD (Piq, Pr 2 ,...) 
such that Pr„(a) = 1 /n, Pr 2n _i(&) = 1 - 1 /n, Pr 2 „_i(c) = 0, Pr 2n (&) = 0, 
Pi' 2 n(c) = 1 — 1/n for all n > 1. It is easy to check that the plausibility space 
arising from this PPD is default-isomorphic to the one in Proposition 6.1. 

It is not hard to construct a trivial plausibility structure that is not default- 
isomorphic to any structure in S £ : Consider the trivial plausibility measure on 
{a} such that Pl({a}) = _L. This cannot be default-isomorphic to a structure 
in iS e , since if Pf is a plausibility measure in such a structure, we must have 
Pl^jo}) = T > P1 ; (0). But this is essentially all that can go wrong. We say 
that a plausibility space (W, PI) (resp. plausibility structure (W, PI, 7r)) is normal 
(following Lewis [19731) if P1(W) > _L. It is easy to see that all structures in <S C , 
S K , and S Poss are normal. 
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Theorem 6.3. If PL £ S QPL is a normal plausibility structure for a countable 
language £, then there is a structure PL' £ S e that is default-equivalent to PL. 

Proof. See Appendix A.3. □ 


Corollary 6.4. If (W, PI, n) is a normal, qualitative plausibility structure for 
a countable language C, then there exists a structure (W, Pl , ,7r) £ S e such that 
(W, PI, 7r) |= <p — yip if and only if {W, PI 7 ,7r) \= <p — yip for all <p,ip £ C . 

Thus, with respect to conditional statements in a countable language, S e is as 
expressive (in a strong sense) as S® PL . However, for uncountable languages, there 
is a difference between S C ^ PL and S e : Probability distributions can assign positive 
weight only to a countable number of pairwise disjoint events, while qualitative 
plausibility measures do not suffer from such constraints. 


7. EPISTEMIC ENTRENCHMENT 


There has been much work related to defaults and plausibility. It can roughly be 
divided into three categories. The first consists of various approaches to dealing 
with uncertainty such as the ones m entioned in Section [^. For a more detailed 
comparison to such approaches see [Friedman and Halpern 19951. The second 
category consists of semantics for defaults that are discussed at length in Section [|. 
The final category includes semantics for defaults that are linguisti c in nature. The 
most well know n approach of this kind is epistemic entrenchment \ Gardenfors and 
Makinson 1988; jGrove 1988 1- This has been proposed as a sem antics for belief 
revision [ Gardenfors 1988 1. Recently, Gardenfors and Makinson [ 1989 j proposed 
using a similar notion of expectation ordering as a semantics for default reasoning. 
We briefly review their approach here. 

Let C be some logical language that includes the usual propositional connectives 
with a compact consequence relation l~£ that satisfies the axioms of propositional 
logic. An expectation ordering < on C is a relation over formulas in L that satisfies 
the following requirements: 


El. < is transitive, 

E2. if \~c 4 > => ip then <p ^ip, 

E3. for any cp and ip, either <p<\<p/\ip or ip<i(pA ip. 


Intuitively, <p < ip if ip is as at least as expected as <p, so the agent would not 
retract his belief in ip before retracting his belief in <p. We do not go here into the 
motivation for E1-E3. It is not hard to verify that E1-E3 imply that < is a total 
preorder on £. 

An expectation structure is a pair E = (£, <), where < is an expectation ordering 
on C. Intuitively, E satisfies (p — yip if ip is the consequence of formulas that are 
expected given <p. This definition hinges on the choice of formulas that are expected 
given (p. Gardenfors and Makinson take these to be the formulas that are more 
expected than -i (p. Formally, an expectation structure E = (£, <) satisfies a default 
(p — yip if {c p } U {£ : -></> <3 £} \~c ip, where <p <\ip holds if <p < ip and not ip < cp. The 
following result is almost immediate from the definitions: 


Theorem 7.1. flGardenfors and Makinson 1989 1 Let E = (£, <) be an expecta¬ 
tion structure. E |= <p — yip if and only if \~c cp =>• ip or {cp =>• -tip) < (</> =>■ ip). 
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While this definition seems quite different than the one described in Section [|, 
the two are in fact closely related. Notice that <p => ~^ip is equivalent to -> (tp A ip), 
while <p => ip is equivalent to -i(<p A -it p). Thus, the second clause in the theorem 
above, which says {<p =>■ -up) < (cp => ip), can be viewed as saying ->{(p A ip) is less 
expected than -'(<pA~'ip)', this is clearly much in the spirit of the second clause in the 
definition of defaults in plausibility, which says that (<p A ip) must be more plausible 
than (<p A -'ip). If we identify p being more plausible than q with —>p being less 
expected than -i q, they are equivalent. The first clause in the theorem, b l (p ip, 
corresponds to the vacuous case that <p has plausibility _L in our definition. However, 
as we now show, Gardenfors and Makinson treat the vacuous case in a somewhat 
nonstandard manner (which can still be captured using plausibility). 

To make the relationship between expectation orderings and plausibility precise, 
let E = (>C, <) be an expectation structure. We say that a set V C C is consistent 
if for all (pi ,..., <p n £ V, we have \fc A ... A <p n ). V is a maximal consistent 
set if it is consistent and for each <p £ C, either (p £ V or -tcp £ V. We now 
construct a plausibility structure PLe = (We, PIe, tie). We define We = [u'v ■ V 
is a maximally consistent subset of £} and ite(wv)(p) = true if p £ V. Finally, 
we need to define PIe- The obvious choice is to define PIe ([</>]) < P1e(M) if and 
only if (~'ip) < ( 'ip )* It is easy to see that this implies that (<p => -> <p) < (<p => ip) if 
and only if P1 e([</>A'0J) > P1e([</> A -d/>]). Thus, E and PLe agree on non-vacuous 
defaults. However, suppose that Pis ([</>]) = _L for some consistent formula <p. It 
follows that PLe \= <p—>ip for any ip. On the other hand, it is not hard to show 
that E |= <p—yip if and only if Pe <p =>■ ip^ We can easily modify the definition of 
Pis to avoid this problem: We define PIe ([</>]) < Pis (M) either if (~>ip) < (~'4>) 
and it is not the case that true < -'ip or if [0] C [^/i]. With this modified definition, 
we get the desired result. 


Proposition 7.2. If E is an expectation structure, then PLe is a plausibility 
structure. Furthermore, E \= <p—up if and only if PLe |= (p — >ip. 


Proof. See Appendix A.4. 


□ 


We now examine default entailment with respect to expectation orderings. Let 
S E be the set of plausibility structures that correspond to expectation structures. 
It is not hard to prove that 


Theorem 7.3. S E is a subset of S® PL . 


Proof. It is straightforward to verify that if E satisfies E1-E3, then PLe sat¬ 
isfies A2 and A3. □ 


It immediately follows that the KLM properties are sound for default entailment 
with expectation orderings, i.e., with respect to S E . The KLM properties, however, 
are not complete with respect to S E . For example, if p and q are arbitrary primitive 


7.1 


11 Proof sketch: The “if” direction follows from Theorem 
Plj5([</>]) = _L, so we must have true < -></>. Since \~r —><f> 
and E2 that true < (0 => -<ip). Moreover, since He (</> => iji) 

Thus, we cannot have (<fi =>- -u/>) <1 (</> =>■ if>), for otherwise, by E2, we would have true < true, a 
contradiction. 


For the “only if” direction, 
(0 =$■ -t 0), it follows from El 
true we have (0 => if) < true. 
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propositions, then p —► false entails q—yfalse. This example is a consequence of a 
property Gardenfors and Makinson call consistency preservation: 

—E |= <j) — y false if and only if \~c <t> =>■ false. 

This property states that <j) is totally implausible —that is, has plausibility J_ —if 
and only if it is inconsistent. This implies that no P1e £ S E satisfies p — ► false, and 
hence p^y false entails, vacuously, all other defaults. Thus, one cannot specify that 
events such as whiteAblack are impossible in the database A; these constraints must 
be somehow embedded in l-£. 

We note that expectation orderings are similar to plausibility measures in that 
they order events. However, there are several differences. First, expectation order¬ 
ings use formulas to denote events. (We remark that there are similar formulations 
of probability theory [ Jeffreys 1961 ] that are based on a linguistic description of 
events.) Secondly, as shown by our construction of PLe , expectation orderings 
order events according to the implausibility of their complements. (This type of 
ordering is usually called the dual order [Dubois and Prade 199C; Friedman and 
Halpern 1995 ; Shafer 1976| .) Thirdly, the treatment of the vacuous case is slightly 
different. This difference leads to additional properties of default entailment. 


8. CONDITIONAL LOGIC 

Up to now, we focused on whether a set of defaults implies another default. We 
have not considered a full logic of defaults, with negated defaults, nested defaults, 
and disjunctions of defaults. It is easy to extend all the approaches we defined so 
far to deal with such a logic. Conditional logic is a logic that treats —> as a modal 
operator. The syntax of the logic is simple: let C c be the language defined by 
starting with primitive propositions, and closing off under A, -i, and —*. Formulas 
can describe logical combination of defaults (e.g., (p—>>q) V (p—y~iq)) as well as 
nested defaults (e.g., (p—yq)—>r). 

We note that the connections between default reasoning and conditional logics 
are well-known; see |Boutilier 1994| : Crocco and Lamarre 1992; Kraus et al. 199C; 
Katsuno and Satoh 1991]. We gloss over the subtle philosophical differences between 
the two here. 

The semantics of conditional logic is similar to the semantics of defaults. As 
with defaults, we evaluate conditional statements such as (j)—>ip by comparing the 
plausibility of those worlds that satisfy </> A if to the plausibility of those worlds that 
satisfy <j> A -iif). Unlike default reasoning, conditional logic allows us to combine 
defaults with propositional statements. Thus, p A (q —>r) is a formula of conditional 
logic, and is satisfied if both p and q — »r are satisfied. The truth of a formula such 
as p A (i q — >r) depends on the world; p A (q — »r) might be true in wi and false in u>2 
if p is true at w\ and not at w? . 

Conditional logic also allows us to consider nested conditionals. For example, to 
evaluate (p—yq)—*r, we need to consider the plausibility of the worlds that satisfy r 
and p—yq and compare them to the plausibility of worlds that satisfy ~>r and p — yq. 
In the structures we considered in the preceding sections, a statement such as p — yq 
is determined by the global plausibility measure. Thus, the set of worlds that satisfy 
p—yq is either the empty set or W (i.e., all possible worlds). It is not hard to show 
that, as a result of this, we can denest nested conditional statements. That is, 
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every formula is equivalent to one without nested conditionals. (See [Friedman and 


Halpern 1994 for a proof of this well-known observation.) The usual definition of 


conditional logic [Lewis 19731 provides a nontrivial semantics for nested conditionals 
by associating with each world a different preferential order over worlds. We can 
give a similar definition based on plausibility measures. 

A (generalized) plausibility structure is a tuple (W,V,n) where W and it are, as 
usual, a set of worlds and a mapping from worlds to truth assignments, and V maps 
each world w to a plausibility space (W w ,tF Wl PI™) where W w C W. Intuitively, 
(W w , T w , PI™) describes the agent’s plausibility when she is in world w. We can 
view the plausibility structures we defined in previous sections to be a special case 
of generalized plausibility structures where V(w) is the same for all worlds w. For 
the remainder of this section we focus on generalized plausibility structures, but 
continue to refer to them as plausibility structures. 

Given a plausibility structure PL = (W,P,ir), we define what it means for a 
formula <j> to be true at a world w in PL. The definition for the propositional 
connectives is standard; for —►, we use the definition already given: 


— (PL, w) \= p if 7 t(w) \= p for a primitive proposition p 
—(PL, w) |= -i0 if (PL, w) (j) 

— (PL, w) \= ( j ) A 0 if (PL, w) \= ( j ) and (PL, w) |= if ) 

— (PL, w) |= 0— >0 if either Pl« ) ([0](pi,, t „)) =-L or PU([0 A 0]( pl,w )) > PU([0 A 
-'V’l (PL, W)), where we define 14 >}( pl , w ) = {w £ W w : (PI, w) |= 0}. 


We can similarly define generalized structures that use preferential orderings, k- 
rankings, e-semantics, or possibility measures instead of plausibility measures. As 
before, all of these structures can be embedded in qualitative plausibility structures. 
We denote by S® PL the class of all qualitative generalized plausibility structures, 
and similarly denote the subclasses that correspond to various semantics (e.g., S(! 
is the class that consists of plausibility structures based on preference orderings). 

We saw that with default reasoning, we could not distinguish between plausibility, 
possibility, preference orderings, e-semantics, and K-rankings. What happens when 
we move to the richer language of conditional logic? As we shall see, this richer 
language allows us to make some finer distinctions. 

We start by examining preferential structures. There is a complete axiomati- 
zation for conditional logic with respect to preferential structures due to Burgess 
[1981] called System C, consisting of the following axioms and inference rules: 


CO. All substitution instances of propositional tautologies 
Cl. 0—^0 

C2. ((0— ^l) A (0-^0 2 )) => (0—►(V’l A 02 )) 

C3. ((01 —>0) A (02—>0)) =>■ ((01 v 0 2 )—>0) 

C4. ((01 >02 ) A (01—>0)) => ((01 A 0 2 )—>0) 

Rl. From 0 and 0 =>■ 0 infer 0 

RC1. From 0O0' infer (0—>0) => (0'—^0) 

RC2. From 0 =>■ 0' infer (0—»0) => (0—>0') 






20 


Nir Friedman and Joseph Y. Halpern 


System C can be viewed as a generalization of system P. The richer language lets 
us replace a rule like AND by the axiom C2. Similarly, Cl, C3, C4, RC1, and RC2 
are the analogues of REF, OR, CM, LLE, and RW, respectively. We need CO and 
R1 to deal with propositional reasoning. 


Theorem 8.1. [ Burgess 1981 ] System C is a sound and complete axiomatization 
of CP with respect to Sf. 


Since the axioms of system C are clearly valid in all the structures in S® PL and 
S p c s? PL , we immediately get the following: 

Theorem 8.2. System C is a sound and complete axiomatization of C c with 
respect to S® PL . 

The proof of Theorem ^d] given by Burgess is quite complicated. We can get a 
simpler direct proof of Theorem S.2, without going through Theorem 8.1, by using 
standard techniques of modal logic. We provide the details in Appendix A.5 . 

Theorems |8.l| and 8.2 show that, even in the richer framework of conditional 


logic, we cannot distinguish between preferential orders and plausibility, at least 
not axiomatically. What about the other approaches we have been considering? 

Not surprisingly, conditional logic does allow us to distinguish rational structures 
from arbitrary preferential structures, because now we can express RM within the 
language, using the following axiom: 


C5. (f—>ip A -i(cj )—►->£) =>■ (j) A f — >ip 

Does C5 (together with system C) characterize Sfl Almost, but not quite. 
We say that a plausibility measure PI is rational if it satisfies the following two 
properties: 


A4. For all pairwise disjoint sets A, B and C, if P1(A) < P1(B), then P1(A) < P1(C) 
or P1(C) < P1(B). 

A5. For all pairwise disjoint sets A , B and C, if P1(A) < P1(B U C ), then P1(A) < 
P1(B) or P1(A) < P 1 (C). 

A4 says that ordering of disjoint sets is modular. (Recall that an ordering is modular 
if there are no three elements x, y , z such that x > y and z incomparable to both 
x and y.) A5 says that the plausibility of B U C is essentially the maximum of the 
plausibility of B and C. Thus, B DC cannot be more plausible than A, unless one 
of the components is more plausible than A. 

It is not hard to show that C5 is valid in, and only in, systems where the plausi¬ 
bility ordering is rational. 

Proposition 8.3. Let S C S® PL . C5 is valid in S if and only if all structures 
in S are rational. 


Proof. 


See Appendix A.5. 


□ 


It is easy to verify that rational preference orderings, K-rankings, and possibility 
measures are all classes of rational structures. It immediately follows that C5 is 
valid in each of Sf, S Poss , and Sf. On the other hand, C5 it is not valid in Sf, 
since we can easily construct preferential structures that violate A4 and A5. 
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As we said above, condition A4 states that the ordering is “almost” modular, in 
the sense that, when restricted to pairwise disjoint sets, it is modular. It is not 
surprising to see modularity arise in this context. It is well known that a modular 
ordering induces a total order. More precisely, if < is a modular order on some set 
and we define x < y as y ft x, then < is a total order, that is, a partial order such 
that either x < y or y < x for all x and y. All approaches that satisfy rational 
monotonicity that have been proposed in the literature involve structures where 
there is a total or modular order on worlds (e.g., rational preference orderings, 
K-rankings, and possibility measures). 

We say that a plausibility measure PI is a ranking if it satisfies the following two 
properties: 

A4'. <d is a total order; that is, either P1(A) <£> Pl(-B) or Pl(-B) <d P1(A) for 

all sets A, B. 

A5 7 . P1(A U B) = max(Pl(A), Pl(f?)) for all sets A, B. 

It is easy to see that A4' implies A4, and that in the presence of A4', A5 7 implies A5 
(A4 7 is required to ensure that the two plausibilities values have a maximum). Thus, 
any ranking is a rational measure. The opposite, however, is not true. It is easy 
to verify that A4 and A5 do not imply A4 7 and A5 7 . Thus, there is a discrepancy 
between the properties that are necessary to satisfy C5 and those studied in the 
literature. However, we now show that if we care only about defaults, then there is 
no difference between rational structures and ranked (plausibility) structures , where 
the plausibility measure is a ranking. 


Theorem 8.4. If (W,P1) be a rational qualitative plausibility space, then there 
is a default-equivalent plausibility space (W,P1 7 ) such that PI 7 is a ranking. 


Proof. 


See Appendix A.5. 


□ 


Corollary 8.5. If PL = (W, V, n) is a rational plausibility structure, then there 
is a ranked plausibility structure PL = (W, V , 7r) such that ( PL , w) \= <p if and only 
if (PL ', w) \= cj> for all worlds w and formulas £ C c . 


Conditional logic allows us to capture another property that we encountered 
earlier. Recall that measures based on PPDs, possibility measures, and K-rankings 
are all normal , that is, that Pl(IU) > _L. This property corresponds to the axiom 

C6. -i (true — >false). 

It is not hard to show that C6 is valid in each of S(( oss ,S^, and S e . 

Using C5 and C6 we can characterize <S”, and S^ oss . 


Theorem 8 .6. (a) C +{ C6 } is a sound and complete axiomatization of S(. 

(b) C +{C5, C6 } is a sound and complete axiomatization of Sf and S(( oss . 


Proof. See Appendix A.5. 


□ 


9. CONCLUSIONS 

We feel that this paper makes three major contributions: the introduction of plau¬ 
sibility measures, the unification of all earlier results regarding the KLM properties 
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into one framework, and a general result showing the inevitability of these proper¬ 
ties. 

Do we really need plausibility measures? That depends on the language we are 
interested in. If all we are interested in is propositional default reasoning and 
the KLM properties, then, as is well known (and our results emphasize), many 
different approaches turn out to be equivalent in expressive power. If we move 
to the richer language of propositional conditional logic, then, as the results of 
Section show, we start to see some differences (that are captured by axioms 
C5 and C6, which correspond to rationality and normality, respectively), although 
plausibility structures and preferential structures c ontinue to be charact erized by 
the same axioms. As we show in a companion paper [ Friedman et al. 1996| , once we 
move to first-order conditional logic, more significant differences start to appear. 
The extra expressive power of plausibility structures makes them more appropriate 
than preferential structures for providing semantics for first-order default reasoning. 
This difference is due to the fact when doing propositional reasoning, we can safely 
restrict to finite structures. (Technically, this is because we have a finite model 
property: if a formula in C c is satisfiable, it is satisfiable in a finite plausibility 
structure; see Lemma A.9.) In finite structures, preferential orders and plausibility 
measures are equi-expressive. The differences that we observe between them in 
first-order conditional logic are due to the fact that in first-order reasoning, infinite 
structures play a more important role. 

Beyond their role in default reasoning, we expect that plausibility measures will 
prove useful whenever we want to express uncertainty and do not want to (or 
cannot) do so using prob ability. For example, we can easily define a plausibilistic 
analogue of conditioning [ Friedman and Halpern 199E| . While this can also be done 
in many of the other approaches we have considered, we believe that the generality 
of plausibility structures will allow us to again see what properties of independence 
we need for various tasks. In particular, in [Friedman and Halpern 1996], we use 
plausibilistic independence to define a plausibilistic analogue of Markov chains. In 
future work we plan to explore further the properties and applications of plausibility 
structures. 
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APPENDIX 

A. DETAILED PROOFS 
A.l Proofs for Section ^ 


Lemma 


4.1 


Let W be a set of possible worlds and let 7 t be a function that maps 
each world in W to a truth assignment to C. Let T C £ do f be a set of defaults that 
is closed under the rules of system P that satisfies the following condition: 


(*) if (f—yif £ T, [0] = and ['0] = [0 7 ], then £ T, for all formulas 

0 , 0 ', 0 , 0 ' £ C. 
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There is a plausibility structure PLt = (W,P1t,7t) such that P1t([0]) < P1t([0]) 
if and only if 0 V ip — >ip £ T. Moreover, PLt |= 0 — >ip if and only if <f> — yip £ T. 

Proof. We start by noting that the condition imposed on T ensures that Plr 
is well defined, i.e., sets that are described by different formulas are compared in 
a consistent manner. We now examine whether there exists a plausibility measure 
{W. P1t) satisfying (*). It suffices to show that the order relation on Plr is reflexive, 
transitive, and satisfies Al. 


Reflexivity. Applying REF and LLE, we get that (0 V 0)—+0 £ T for all 0. 

Transitivity. This is a direct consequence of the following lemma of Kraus, Lehmann 
and Magidor. 


Lemma A.l. [ Kraus et al. 1990| , Lemma 5.5] Let T be a set of defaults closed 
under applications of the rules of system P. Then if both 0i V <f> 2 — ¥ <pi arid 02 V 
0 3 — ><f> 3 are in T, then so is 0i V 03—>0 3 . 


Al. Assume [0] C [0], It follows that [0] = [ip V 0]. Since T is closed under 
REF we get that (0 V 0)^(0 V ip) £ T. Using (*), we get that (cp V ip)—up £ T. 
Thus, P1 T ([0]) < P1 t(M). 

Finally, we need to show that ( W , Plr, if) ]= <p—>ip if and only if <p—yip £ T. We 
start by observing that LLE, REF, and AND imply that 0— >0 £ T if and only if 
(cp A -iip) V (0 A ip)—Hp Aip £T. We conclude that 

(**) (p—*ip £ T if and only if P1 t([0 A -1 0]) < P1t([0 A 0]). 

Thus, it suffices to show that P1 t([0 A -•'0]) < P1t(I</> A ip}) if and only if either 
P1 t([0A->0]) < P1t([ 0A0J) or P1 t([ 0]) = T. The “if” direction is trivial. For the 
“only if” direction, suppose by way of contradiction that we have Plr([0]) > -L, 
P1 t([0 A -’0]) < P1t([0 A 0]), and P1 t([0 A 0]) < P1t([0 A ->0]). From (**), we 
have that <p —>0 £ T and (p—ip £ T. By AND and (*), we have that <p—+false £ T. 
But then Pfr([0]) = -L, which contradicts our assumptions. □ 


A.2 Proofs for Section |] 

Theorem [t~2| . If A F P / 0— >ip, then A |= 5 PL 0 —>0. 

Proof. We need to show that LLE, RW, and REF are sound in S 
PL = (W, PI, 7r) be a plausibility structure. We proceed as follows. 


PL 


Let 


LLE. Assume that \~c 0 <p' ■ Then, by definition, [0] = [0'J. The soundness 

of LLE immediately follows. 

RW. Assume that \~c 0 =>■ ip' and that PL |= cp — >%p. We want to show that 
PL |= 0—>0'. If P1([0]) = _L, this is immediate. On the other hand, if P1(|0]) > _L, 
then Pl(|0 A -■0]) < P1([0 A 0]). Since p£ 0 => ip' we have that [0] C [0'J. It 
follows that [0 A -i0'] C [0 A —>0] and [0 A 0] C [0 A 0']. Using Al, we conclude 
that P1([0 A 0'] > P1([0 A —i0'], so PL \= <p—*ip'. 

REF. By definition, [0 A ->0] = 0 and P1(0) = _L. Thus, if P1([0]) > T, then 
PL \= 0—>0. On the other hand, if P1([0J) = T, then PL \= cp — y<p vacuously. 


□ 
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Proposition 

AS!. 


5.3 


A plausibility measure satisfies A 2 if and only if it satisfies 


Proof. Let (W. PI) be a plausibility space. Assume that PI satisfies A2. Let A, 
Bi , and B 2 be sets such that Pl(AnJ3i) > Pl(Anl?i) and Pl(Ani? 2 ) > Pl(Anl? 2 )- 
Set C = Af]B 1 C\B 2 , D = Ar\Bi<lB 2l and E = AflRi. It is easy to verify that C, D, 
and E are pairwise disjoint. Since CUD = AnBi, we have that Pl(CUD) > P1(E). 
Moreover, since CUE D AC\B 2 , D C AdB 2 , and Pl(Ani? 2 ) > P1(y1 D^ 2)5 we can 
apply A1 and conclude that Pl(C U E) > P1(D). Applying A2, we conclude that 
P1(C) > P1(D U E), i.e., P1(A nBiO B 2 ) > P1(A n (Ri n R 2 )). This gives us A2'. 

Now assume that PI satisfies A2'. Let C, D , and E be pairwise disjoint sets such 
that P1(C U D) > Pl(£) and P1(C U E) > P1(D). Let A = CUDUE,B± = C UD, 
and B 2 = CUE. Then we have P1(A nBi) = P1(C_U D) > P1(E) = P1(A n B x ) 
and P1(A D B 2 ) = P1(C U E) > Pl(£)) = P1(A n B 2 ). From A2', we have that 
B\{AUB 1 UB 2 ) > Pl(An (B 1 n B 2 )), i.e., P1(C) >Pl{DUE). This gives us A2. □ 


Theorem 5.4. V C S® PL if and only if for all A,0, and ip, if A bp 
then A |=$ (p — yip. 


(p-yip, 


Proof. To prove the “if” direction it suffices to show that each rule in system P 
is sound in qualitative structures. Let PL = (W, PI, 7r) be a qualitative plausibility 
structure. The soundness of LLE, RW, and REF is proved in Theorem 5.2. To deal 
with the remaining cases, we proceed as follows. 


AND. Assume that PL \= 0— yip\ and PL |= (p — >ip 2 . If PI([</>]) = T, then 
PL \= (p—yip\ A ip 2 vacuously. Assume that Pl( [(/>]) > T. Let A = [0], B\ = [Vt], 
and B 2 = \ip 2 1- Since PL \= <p—yipi and PL |= (p—+i p 2 , w e have that P1(A fl Bfi) > 
Pl(AnRi) and Pl(Anl? 2 ) > Bl(AC\B 2 ). Proposi tion 5.3 sta tes that PI satisfies A2', 
and thus we get that P1(A C\B\C\B 2 )> P1(A fl (I?i fl B 2 )), so PL \= 0—>V’i ^ 02- 

CM. Again assume that PL |= (p — *ip\ and PL |= <p — yip 2 . If P1([0 A ipij) = T, 
then PL \= (p A ipi—+ip 2 vacuously. Assume that P1([0 A 0i]) > _L. Let A, B\, and 
B 2 be defined as in the treatment of AND above. Again, we have P1((A fl B\ fl 
B 2 ) > P1(A n ( B\ fl B 2 )). Since A fl Bi fl B 2 C An (Bi fl B 2 ), we conclude that 
P1(A n B\ n B 2 ) > P1(A flBi fl B 2 ). Thus, PL |= (p A ipi—yip 2 . 

OR. Assume that PL |= (pi—*ip and PL \= (p 2 —+ip. If Pl([0i]) = Pl([02]) = T, 
then applying A3 we get that Pl([0i V 02]) = -L and thus PL |= (0i V <p 2 )—yip 
vacuously. So assume that Pl([0i]) > T. (Identical argument works if Pl([02]) > 
_L.) Set A = |(0i V02) A 0], £?= [0i A -i0], and C = [02 A-i0i A-i0J. To prove that 
PL \= (0i V 02)—>0, we must show that P1(A) > P1(R U C). Since PL \= 0i—>0, 
we have that P1(A) > Pl([0i A 0]) > P1(R). If Pl([02]) = T, then Pl(C') = T 
and we conclude that P1(A) > P1(C). On the other hand, if Pl([02]) > T, then 
since PL |= 0 2 ^0, we have P1(A) > Pl([02 A 0]) > Pl([02 A —>0]) > P1(C). From 
A2, P1(A) > P1(B), and P1(A) > P1(C), we get that P1(A) > P1(B U C). Thus, 
PL f= (01 V 02) yip. 


To prove the “only if” direction we have to show that if there is some PL = 
(W, PI, 7 r) in S that is not qualitative, then the KLM properties are not sound with 
respect to P. Assume that PI does not satisfy A2. Since we have assumed that 
T = {[0] : 0 € £}, there are formulas 0, 0i, and ip 2 , such that [0], [0i], and 
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Ifa] are pairwise disjoint, P1([0 V ^ 2 ]) > Pl([V’il) ) P1([0 v V’ll) > PKM), and 
yet P1([0]) Pl([^i A ^ 2 ]). Thus, PL |= fa V fa V ^ 2 )—^—■'01 and PL |= (0 V ^1 V 
fa)—+~'fa. However, PL faV’if 1 V fa)^-(~'fa A^fa). This shows that the AND 
rule is not sound in 5. Now assume that there is some PL = (VP, PI, 7t) that does not 
satisfy A3. Thus, there are formulas 1 and fa such that Pl([^>i]) = Pl([<^ 2 ]) = -L 
and Pl([^i V fa\) > -L. We conclude that PL \= fa—>false and PL |= fa—>,false, 
but PL Y= (fa V fa) —*■ false. This shows that the OR rule is not sound in S. □ 


Theorem 5A5. Each of S 


Poss 


S K , S e , S p , and S r is a subset of S QPL . 


Proof. It is straightforward to verify that A2 and A3 hold for each structure in 
S Poss , S K ,S e ,SP, and S r . 

We start with S Poss . Let (VP, Poss, n) be a possibility structure. To prove A2, 
assume that A, B,C C W are pairwise disjoint sets such that Poss(AUP) > Poss(C) 
and Poss(A U C) > Poss (B). Since Poss(A U B) = max(Poss(A), Poss(P)), we 
have that max(Poss(A), Poss(P)) > Poss(C') and that max(Poss(A), Poss(C)) > 
Poss(P). It easily follows that Poss(A) > max(Poss(P), Poss(C)) = Poss(P U C), 
as required by A2. To prove A3, suppose that Poss(A) = Poss(P) = 0. Since 
Poss(A U B) = max(Poss(A), Poss(P)), we have that Poss(A UB) = 0, as required 
by A3. 

The proof for S K is identical (replacing max and 0 with min and 00 , respectively). 

Next, consider S e . Let (VP, {Pr^}, 7r) be a PPD structure and let (VP, Plpp,7r) 
be the corresponding structure in S e . To prove A2, assume that A, B,C C VP 
are pairwise disjoint sets such that Plpp(A U5) > Plpp(C) and Plpp(A U C) > 
PI pp(B). We want to show that Plpp(A) > PI pp(B U C). According to the 
construction of Theorem ^4.2| , we need to show that lim^oo Pr.;(A | A U B U C) = 1 
and that Hindoo Pr^ (BUCIdUBUC)/! (the limit can be undefined in this 
case). Since Plpp(A UB)> Plpp(C) and Plpp(A U C) > PI pp(B), we have that 


limj-,00 Piy(A U5|4UBUC) = 1, lim^oo Pr^(A UC|dUBUC) = l (3) 
lim^oo Pr i(B |AUBUC)/1, lim^oo Pr^C AUBUP)^1 (4) 

To prove that lim^oo Piy(A | A U B U C) = 1, fix e > 0. From (|3|) , we have 
that there is an n e such that for all i > n e , Pr,(A UB|dUBUC)>l-| and 
Pr, ; (AuC | AUPUC) > 1 —Letf > n e . There are two cases. If Prj(AU.BUC') = 0, 
then Pri(A \ A U B U C) = 1 by definition. If Pr^(A | A U B U C) > 0, we use the 
disjointness of A, B , and C to get 

Pr,(A | A U B U C) + Pr ,(B |AUBUC) > 1 - | 

Pr j (A | A U B U C) + Pr i (C |AUBUC) > 1 - | 

This implies that Pr,(A | A U B U C) + Piy(A UBUC|AuBUC)>2-e. Since 
Prj(AuBUC | AUBUC) = 1, we get that Pr.;(A | AUBUC) > 1 —e. We conclude 
thatPr,;(A | AUPUC) > 1 —e for alii > n e , and thus lim^oo Pr i(A \ AUBUC) = 1. 

To prove that lmp-^ Pr^PUC | AUPUC) 7 ^ 1 , it suffices to find a subsequence 
on which Pr i(B U C \ AUBUC) — > 0. Let i\, i%,... ,ij,... be the sequence 
of indexes such that Pr,. (A U B U C) > 0. This sequence must be infinite, for 
otherwise, since Pr i(B | AUBUC) = 1 whenever Pr^(A UBUC) = 0, we would 
have that lim^oo Pr i(B \ A U B U C) = 1, contradicting ([|). From lim woo Pr-f A \ 
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A U B U C) = 1, we have that linx,-^ 
Pr^CBuC | JlUBUC) = l-Pr^A 
A U BUC) =0. We conclude that 
To prove A3, assume that A, B C W 


„ Pr^. (A | A U B U C) = 1. Moreover, since 
dUBUC), we get that limy^oo Pr^. (B U C \ 


,Pii{BuC AUBUC)/1. 
are such that Plpp(A) = PI pp(B) = 
_L. By the construction of Theorem 4.2, we have that Plpp(A) <J_= Plpp(0) 
if limi^ooPri(0 | A U 0) = 1. This implies that there is an index ua such that 
Piy(A) = 0 for all i > ua- Similarly, there is an ns such that Pr,(I3) = 0 for 
all i > ng. Hence, Pr,(A U B) = 0 for all i > max(riA, ng). We conclude that 
PIpp(AUB) = J_. 

Finally, we consider S p and S r . Let (IF, —<, 7 r) be a preference structure and 
let (W,PL/, 7 t) be the corresponding structure in S p . To prove A2, assume that 
A, B, C C IF are pairwise disjoint sets such that Pl^(AU-B) > Pl^(C) and P1^(AU 
C) > Pl^(-B). We want to show that Pl^(A) > P1^(H UC). It is easy to verify 
that the construction of Theorem 4.2 is such that disjoint sets cannot have equal 
plausibilities. Thus, it suffices to show that PL-(A) > P1^(H U C). That is, for 
all w £ B U C there is a world w' £ A such that (a) w' A w and (b) there is no 
w" £ B U C such that w" -< w'. Let wbg £ B LiC. Without loss of generality, we 
can assume that w £ B. Since P1_<(AUC') > Pl^(-B), there is a world wac £ AuC 
such that wac A wbc and for all rug £ B : wb 7 ^ wac- There are three cases: (1) 
If wac € C , then since P1_<(A U B) > Pl^(C), there is a world wab £ AU B such 
that wab -< wac and for all wc £ C, wc 7 ^ wab- Since wb 7 ^ wac for all wb £ B, 
we get that wab £ A. For requirement (a), by the transitivity of -< we have that 
wab -< wbc- For requirement (b), suppose that w" £ B U C. If w" £ C , then we 
have that w" 7 ^ wab- On the other hand, if w" £ B, then we have that w" wac , 
and by transitivity w" -ft. wab- (2) If wac £ A and there is a world wc £ C such 
that wc A wac, then since PL-(A U B) > Pl^(C), there is a world wab such that 
wab A wc and for all worlds w" £ C , w" -/< wab- Again, it follows that wac € A 
and satisfies (a) and (b). Finally, (3) if wac G A and for all wc £ C, wc 7 ^ wac, 
then it is easy to check that wac satisfies (a) and (b). 

To prove A3, we note that the construction of Theorem 4.2 is such that P1_<(A) = 
J_ if and only if A = 0. A3 immediately follows. □ 


Theorem T 8 . A set S of qualitative plausibility structures is rich if and only if 
for all finite A and defaults <f> — vi/), we have that A ^=5 <f>—implies A hp <fi — yip. 

Proof. For the “if” direction, assume that S is not rich. We need to show that 
system P is not complete for |=s. It is sufficient to construct A, cp, and ip such that 
A (p — yip but A I/p cp — yip. 

We start with a lemma, whose straightforward proof is left to the reader. 

Lemma A.2. Let <pi,... ,<p n be a collection of mutually exclusive formulas. Let 
A consist of the default <p n —yfalse and the defaults (piVcpj — y(pi for all 1 < i < j < n. 
Then (W, PI, n) \= A if and only if there is some j with 1 < j < n such that 

P1(M) > P1(M) > • • ■ > P1(M) = • • ■ = Pl([0nl) = -L. 


Since S is not rich, there is a collection (pi ,..., <p n that is a counterexample to 
the definition of richness. Let A be the set of defaults defined in Lemma |A.2| . We 
claim that if (IF, PI, if) £ S satisfies all the defaults in A, then Pl([/> n _i]) = _L. To 
see this, assume that Pl([0„_i]) > J_. Then according to Lemma |A.2|, Pl([0i]) > 
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••• > Pl([/>„_i]) > Pl([</>„]) = J_, but this contradicts the assumption that the 
sequence <j>i,..., <j> n is a counterexample to richness. Since Pl( [/>„_ 1 ]) = -L in every 
structure that satisfies A, we conclude that A |=s <f> n -i — >false. 

We now show that A I/p <p n -i —► false. The easiest way of proving this is by 
using Theorem 3.1. All we need to show is that there is a preferential structure 
that satisfies A but does not satisfies (p n ~i —y false. Let W = {w\, ..., w n -i}, let -< 
be such that Wi -< wj for all i < j, and let n be such that tt( wi)(cpj) = true if and 
only if i = j. It is straightforward to verify that (W, —<, 7r) satisfies A. However, it 
easy to see that (W, -<, tt) /= y false. This concludes the proof of “if” direction. 

For the “only if” direction, assume that th ere is some A and <p—yip such that 
A (=5 (p—yip but A I/p <p—yip. Using Theorem 3T we get that A /= p cp—yip. Thus, 
there is some preferential structure P = (IF, —7r) that satisfies the defaults in A 
but not <p — yip. In fact, as the following lemma shows, we can assume that P is a 
linear structure. 


Lemma A.3. [ Friedman and Halpern 1994 1 Let A be a finite set of defaults. If 
there is a preferential structure that satisfies A and does not satisfy (f> — yip, then there 
is a preferential structure P = ( W , -<, 1 r) such that W = {wi,..., w n }, Wi <Wj for 
all i < j, P |= A and P /= <p — yip. 


We now use P to construct a sequence of formulas that will be a counterexample 
to the richness of S. Let pi, ■ ■ ■ ,p m be the propositions that appear in A and (p — yip. 
Since A is finite, there is a finite number of such propositions. We note that whether 
a default <p—yip is satisfied in P depends only on the minimal world satisfying cp. If 
7 r (wi) and 7 r (wj) for some i < j agree on the truth of pi,... ,p m , then Wj cannot be 
a minimal world for any formula defined using only pi.. ■ p m . Thus, we can assume, 
without loss of generality, that for all Wi 7 ^ Wj , there is some pu that is assigned a 
different truth value by each of the two worlds. We now construct formulas that 
characterize the truth assignment to pi,... ,p m in each world in W. Let 

(pi = f\ pj A f\ -n pj 

{j'.n(wi)(pj)=true } {j:7r(ti;i)(p 3 )=false} 

for i = 1,..., n, and let (p n +i = V ... V <p n ). It is easy to verify that these 
formulas are mutually exclusive. 

We now claim that if PL is a plausibility structure where Pl([/>i]) > ••• > 
Pl([0n+1 ]) = _L, then PL satisfies the defaults in A but not <p — yip. This will suffice 
to prove that S is not rich, since if S contains such a structure we get a contradiction 
to the assumption that A |=s <p — yip. 

Let PL be a plausibility structure where Pl([0i]) > • • • > Pl([/> n+ i]) = JL. We 
want to show that PL \= f —>/' if and only if P \= f —>/', for all formulas ^ and 
defined using only pi,...,p m . 

Let Ip,!; 1 be formulas defined over pi,... ,p m . Assume that P \= There are 

two cases: either (a) f is not satisfied in W , or (b) the minimal world satisfying £ 
also satisfies In case (a), it is easy to see that \~c f => <p n + 1 - From Al, we have 
that Pl(^) = T, and thus PL |= vacuously. In case (b) assume that Wi is the 
minimal world satisfying /. Since P [= /— yf' we have that Tr(wi) [= £ A£'. A simple 
argument shows that \~c (pi => £, A f 1 . Thus, using Al, we get that Pl([£ A ^']) > 
Pl([(/>i]). Since Wi is the minimal world satisfying £ and it also satisfies £', we have 
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that is not satisfied by w±, ..., Wi. Since (j> i,..., <j > n +1 are exhaustive, we have 

that I ~c (CA-'C') => (</>i+iV.. .V</>„+ 1 ). Thus, Pl([£A-i£']) < Pl([^ i+ i V...V^ n +i])- 
By repeated applications of A2 and the fact that P1([0»]) > Pl([0j]) for all j > i, 
we get that Pl( [</*$]]) > Pl[£ A We conclude that Pl([£ A £']) > Pl([£ A 

and thus PL \= +£'. 

Now assume that P /= £—■ Thus, there is a minimal world Wi that satisfies £; 
moreover, Wi does not satisfy £'. This implies that P \= £—►-!£' and Pl([£]) > T. 
Applying the proof in the previous paragraph, we have that Pl([£ A ->£']) > Pl([£ A 
£']), and thus PL /= □ 


A.3 Proofs for Section [| 

We now prove Theorem |6.3| . We start with two preliminary lemmas. 

Lemma A.4. Let (W, T, PI) be a normal qualitative plausibility space such that J- 
is finite, let A *, B* £ T be disjoint sets such that P1(A*) / Pl(i?*), and let x > 2. 
Then there is a probability measure Pr over W such that Pr(I3*|A* U B*) < A; 
moreover i/Pl(A) < P1(.B) then Pr(B|AUi?) > 1 —A, for all disjoint sets A, B £ T. 

Proof. Let Ai,. .., A n be the atoms of T, i.e., each A* ^ 0 is in T and there 
is no nonempty B £ T such that B C A;. Since T is finite, every set in J 7 is a 
disjoint union of atoms. 

We can describe PI using a set of defaults. Let pi,... ,p n be a collection of distinct 
propositions. For each set A £ T we define 4>a = V a c a Pi if A is nonempty, and 
define <j)A = false if A is empty. Let 

A = {{<j)A V <fs)^B : A,B £ f.AflB = 0, P1(A) < Pl(fl)} U 
{(Pi A Pj)—>false : i ^ j} U 
{-’(pi V ... V Pn )—* false}. 


Let 7r be a truth assignment to W such that n(w)(pi) = true if and only if 
w £ Ai. Then it is easy to check that PL = (W, T, PI, tt) satisfies A and PL /= 
{4>a* V</>b*)— >4>b*- Since PI is a qualitat ive plausibility measure by assumption, we 
have that PL £ S® PL . Using Theorem Y8, we get that A I/p {<j)A* V (\>b* )^><f > B* ■ 
By Theorem 3.1, there is a preferential structure P = ( Wp, Y, 7rp) such that P 
satisfies A but P /= (<Pa* V <f>p» )—*(j)B * • Applying Lemma |A.3| we can assume that 
P is linear, i.e., Wp = {iq,... ,v m } for some m < n, and -< is such that ~< Vj 
if i < j. Moreover, we have that Wp not empty: Since PL is normal, we have 
that PL /= true —► false. Hence, P \f= true — >false, which implies that there are some 
minimal worlds that satisfy true. 

We now construct the required probability measure over W. We start by not¬ 
ing that the defaults in A imply that for each world V{, 7 rp(vi) assigns true to 
exactly one proposition. Thus, without loss of generality, we can assume that 
7 Tp(vi)(pj) =true if and only if i = j. We define Pr by assigning a probabil¬ 
ity to each atom. The probability of all other sets is induced from this assign¬ 
ment: Pr(A) = Ea-caP^), for all A £ T. Let A,; be an atom. We define 
Pr(Ai) = a ■ (A) 1 , if i < m; otherwise we define Pr(Ai) = 0. The constant a is a 
normalization constant that ensures that the probability of atoms sum to 1. It is 
easy to verify that a = (x — l)y§— 


-l • 
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We now show that Pr satisfies the requirements of the lemma. Assume that 
A, B £ P are disjoint and P1(A) < Pl(-B). We want to show that Pr(£?|A U B) > 
1 — i. By definition, (</>a V (/)b)^> f>B G A, and thus P |= (<f>A V 4>b)^4 , b- There 
are two cases: either (a) there is no world in Wp that satisfies {<j>A V <Pb) or (b) the 
minimal world that satisfies (<Pa V </>b) also satisfies <j>B- In case (a), it immediately 
follows that if Aj C AU B, then i > m. We conclude that Pr(A) = Pr(i?) = 0. 
Thus, Pr(B\A U B) = 1. (Recall that if Pr(A U B) = 0 then, by convention, 
Pr(I3|A U B) = 1.) In case (b), assume that v, is the minimal world satisfying 
<f>A V 4>b■ Since P \= ((\>a V (/>B)—*<f>B, it must be the case that vt satisfies (j>B■ This 
implies that Pr(R) > Pr(Ai). Since Vi is the minimal world that satisfies 4>a V 4>b, 
and since Vi does not satisfy 4>b (since A and B are disjoint) we conclude that 
Pr(A) < X^>iPr(Ai)- Simple calculation show that Y^j > i^ >1 '(Aj) < Pr(Aj) • 
Thus, (x — 1) Pr(A) < Pr(A,;) < Pr (B). This implies that (x— l)(Pr(A) + Pr(R)) < 
xPr(B). Since A and B are disjoint, we have that Pr(A U B) = Pr(A) + Pr (B). 
We get that (x — 1) Pr(A UB)< xPr(R), so Pr(_B|A UB) > ^r* 

Finally we have to show that Pr(B*| A* UR*) < Since P (4>a*V4 > b*)—>4 i b*, 
the minimal world, Vi, satisfying 0a* V (ftp* does not satisfy Since A* and 

B* are disjoint, this implies that Vi satisfies <j>A*- The argument above shows that 
Pr(A*|A* U B ) > 1 - - and Pr(A* U B*) > 0. Therefore, Pr(B*|A* U B*) < \ < 

3- □ 


Lemma A. 5. Let (W, PI) be a normal qualitative plausibility space such that 
T is finite. Then there is a PPD PP = {Pr ra : n > 1} such that, for all disjoint 
A,B e 


—*/Pl(A) < P1(I3), then Pr n (B\A U B) > 1 — f or a n n> 

—if P\(A) P1(R), then for all n, there is an m such that n < m < n + \ J -\ 2 and 

Pr m (B\A U B) <\. 

Proof. Let Ao,..., A\p\_ 1 be some enumeration of the members of T. We 
define the PPD PP = {Pr„ : n > 1} as follows. For each n > 1 we define i n ,jn to 
be the unique integers s uch t hat n = k - \P\ 2 + i n ■ \P\ +j n for some positive integer 
k. According to Lemma |A.d| there exists a probability distribution Pr„ on W such 
that if P1(A) < P1(I3), then Pr n (B\AVJB) > 1 — for all disjoint sets A,B £ F. 
Moreover, if Pl(Aj n ) -ft Pl(Aj n ), we can ensure that Pr n (Aj n |Aj n U Aj n ) < It is 
easy to verify that this PPD satisfies the requirements of lemma. □ 


Theorem 6.3. If PL £ S ( I pL is a normal plausibility structure for a countable 
language C, then there is a structure PL' £ S e that is default-equivalent to PL. 


Proof. Let PL = (W, T, PI, n) be a normal qualitative plausibility for a count¬ 
able language C. Since C is countable, so is T = {[</>] : <j> £ £}. Let A 1 ,A 2 ,... be 
an enumeration of the sets in T. Without loss of generality, we can assume that 
A\ = W. Since PI is normal, we must have Pl(Ai) > _L. For each fc, let Tk be 
the minimal algebra that contains Ai,..., Ak. Clearly, Pk is a finite algebra, and 
PI restricted to Pk. is normal. Thus, there is a PPD PP k = {PrJ,Pr|,...} that 


satisfies the conditions of Lemma A.5 


We now use elements of these sequences to construct the desired PPD. We define 
PP to be the sequence that consists of a segment of PP 1 , followed by a segment 
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of PP 2 , and so on, such that the length of the segment from PP k is |-Ffc| 2 : 

{P r ii • • • )P r i+|^i| 2 -iiP r 2> ■ • • ?i’ • • • >P r fc> • • •) P r fc+|.Ffc| 2 -i> ■ ■ •}• 

To show that the plausibility measure that corresponds to (W, PP , 7r) is default- 
equivalent to PL we need to show that for all disjoint Ai,Aj G T, Pl(Ai) < P1(A,) 
if and only if limn^oo Pr n (Aj\Ai U Aj) = 1. 

Assume that Pl(Ai) < Pl(Aj). Let e > 0. Set m e = ma[p]), and N e = 
\3~k\ 2 - Let n > N e . Then our construction is such that Pr„ = Prf for some 
l > k > m e . Since k > max(i,j), we have that Ai 1 Aj G T^. Moreover, according 
to Lemma |A.5| , Prf (Aj\Aj U Aj) > 1 — > 1 — m 1 +1 > 1 — e. Thus, we conclude 

that limn^oo Pr n (Aj|A, ; Udj) = 1. 

Assume that Pl(Ai) ^ P^A^). Let k > ma x(i,j). According to Lemma A.5, 


there is an m such that k <m < k+ \J~k\ 2 such that Prf 1 (Aj lAjUA^) < Moreover, 
by the our construction, there is an n such that Pr„ = Prfj. Thus, for infinitely 
many n, Pr n (Aj|Aj U Aj) < We conclude that limn-,,*, Pr„(Aj|Aj U Aj) ^ 1. □ 

A.4 Proofs for Section ( 7 ] 

Proposition |7.2| . If E is an expectation structure, then PLe is a plausibility 
structure. Furthermore, E |= <p — yip if and only if PLe |= </> — yip. 

Proof. Suppose E = (C , <) is an expectation structure, and PLe = (We, PIe, 7Te)- 
To show that PLe is a plausibility structure, we need to check that the ordering 
defined by PIe is reflexive, transitive, and satisfies Al. Note that it is easy to show, 
using standard arguments, that [(/>] C [0] if and only if Pc (p =>■ ip. The proof that 
PLe is plausibility measure follows in a straightforward manner and is left as an 
exercise to the reader. 

We now show that E \= <p—yip if and only if PLe |= (p — yip- Assume that E |= 


<p — yip. According to Theorem 7.1 there are two possible cases: either (a) \~c <j> => ip 
or (b) (cp => -tip) < (cp => ip). In case (a), we apply REF and RW (which are valid in 
all plausibility structures) to get that PLe |= 0—>0. Now consider case (b). It is 
clear that true^(cp => -up), for if true< ( (p => ~np), then true<\ (cp =>• ip) by El. We 
also have (</>=> ip) < true by using E2, so by El again, we get that true<\ true, which 
is a contradiction. Since true ^(<p => -1 ip) and (<p =>• -1 ip) <3 (<p =>■ ip), by definition, 
we have that P1 e([</> A -i0]) < P1 e([0 A ipj). Moreover, since true $((p => -1 ip), 
we have that <p A ip is consistent. Thus, l/c 0 A 0 => 0 A ->ip. Furthermore, since 
(<p => -up) <3 (<p => ip), we also have that (<p => ip) 01 (0 => ~^ip). This implies, by 
definition, that Pl^; (A —>-0]) ^ P1e([0A0]). Hence, P1e([<AA-'V’1) < P1e(|[0A0]), 
and so PLe \= 0—>-0. 

Now assume that PLe \= <p — up. If p£ <p => 0, then E \= (p — yip. Assume that 
\fc 4> => ip- This implies that <pA~iip is consistent in C. We claim that P1e([0]) > T. 
To see this, assume that P1e([0] < Pl([/afee]). Since true< - 1 false, the definition 
of P1e implies that Pc <p =>■ false. But this contradict the assumption that 0 is 
consistent in C. We conclude that P1e([0]) > -L, and thus since PL e |= (p — yip, 
P1e([0 A ipj) > P1e([0 A —i'j/ 7 ])- It is straightforward to show that since (p A -up is 
consistent in C, we get that -i(<p Aip)< -i(<p A -up). Rewriting this equation, we get 
that (<p => -up) <3 {(p => ip), and thus E |= <p—*ip. □ 
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A.5 Proofs for Section g 

We now want to prove Theorem For the proof, it is useful to define Ncp as an 
abbreviation for -i <j>—y false. (The N operator is called the outer modality in [ Lewis 
1973(1 -) Expanding the definition of —>, we get that Ncp holds at w if and only if 


Pl([->(/>]) =_L. Thus, Ncp holds if -*p is considered completely implausible. Thus, 
it implies that cp is true “almost everywhere”. The following lemma collects some 
properties of N that will be needed in the proof. 


Lemma A.6. (a) Pc N(cp A ip) => Ncp. 

(b) Pc (Ncp A Nip) =>• N(cp A ip). 

(c) Pc (Ncp A N(<p => ip)) => Nip. 

(d) If Pc <p then Pc N<p. 

(e) P c Ncp =>■ {tp—>(p). 

(f) be (N(cp cp') A N(ip o ip')) => ((< p^ip) (cp'-*ip')). 

Proof. Recall that Ncp is defined as ~«p — yfalse. 

We start with part (a). 

1. P c (->(0 A ip)—\false) =>■ (~>(cp A ip)-^—xp) 

2. Pc (~ > {<P A ip) —► false) => (( _, (</> A ip) A -><p) —► false) 

3. Pc ( _, (0 A ip) — yfalse) => (~<cp — >false) 

4. Pc N(cp A ip) => Ncp 

To prove part (b), we proceed as follows: 

1. Pc ((->cp—yfalse) A (~>ip —* .false)) =>■ ((->0 V ~<ip) — yfalse) 

2. Pc ((~>cp—yfalse) A (~>ip — yfalse)) =>■ {~'(<p A ip) — yfalse) 

3. Pc (Ncp A Nip) =>• N(cp A ip) 

For part (c), we proceed as follows: 

1. Pc (Ncp A N(cp =>■ ip)) => N(cp A (cp =>■ ip)) 

2. Pc (Ncp A N(cp =>■ ip)) => N(cp A ip) 

3. P c (Ncp A N(cp => ip)) => Nip 

To prove part (d), we assume that Pc cp- 

1. P c cp 

2. Pc true <=> cp 

3. Pc false—>false 

4. Pc -‘cp^yfalse 

To prove part (e), we proceed as follows: 

1. P c (ip A cp) yep 

2. Pc (~ 1 <cp — yfalse) =>• (~<cp — yep) A (~<cp — yip) 

3. (( [ Cp yep) A (-. cp—yip)) => ((ip A ~<cp) yep 

4. Pc (((ip A (p)^cp) A ((ip A ->cp)^ycp))) => (ip^ep) 


RC2 
1, C4 
2, RC1 
3 rewritten 


C3 
1, RC1 
2 rewritten 

(b) 
1, RC1 
(a), 2 

assumption 
1, CO 
Cl 
3, RC1 

Cl, RC2 
RC2 
C4 

C3, RC1 
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5. he N<f> => (0—>0) 

Finally, we prove part (f). 

1. he 1V(0 cj)') =>■ (JV(0' 0) A N(cf> =>• (/)')) 

2. h c N((f>' =>■(/>)=>■ ((0' A —>0)—►■0) 

3. h c JV(0 => 0') =b (0—>(0 =>■ 0')) 

4. h c JV(0 => 0') =► (0—0') 

5. h c (0—>00 A (0 >0) => ((0' A 0)—>0) 

6. he N(<f> 00 A (0—>0) =>- (0'—>0) 

7. he IV(0 00 => (0 / —>(0 => 00) 

8. he A(0 <t=> 00 A 7V(0 00 A (0—>0) => (0'—>00 


1,2, 3,4 
(a) 

definition of TV, RC2 

(e) 

3, Cl, C2, RC2 
C4 

1, 2, 3, 4, 5, C3, RC1 
(e), RC2 
6 , 7, C2, RC2 


□ 


Theorem 8.2. 
respect to S// PL . 


System C is a sound and complete axiomatization of C c with 


Proof. It is easy to verify that System C is sound in S® PL . To prove complete¬ 
ness, we have to show that if |= s qpl 0 , then he 0 - This is equivalent to showing 
that if 0 c 0 (he., ->0 is consistent) then Y = s qpl 0 (i.e., - i 0 is satisfiable). 

We construct a canonical qualitative plausibility structure PL such that for all 
£ £ C G we have that if £ is consistent, then ( PL,w) \= f for some world w, using 
standard techniques. Recall that a set of formulas V C C c is a maximal hc- 
consistent set if it is consistent with respect to he and for each 0 £ CP , either 
0 £ V or -i0 £ V. Let V be a set of formulas. We define V/JV = {0 : N</> £ V}. 

Define PL = (W, V , 7 r) as follows: 


—W = {wy : P C C c is a maximal hc-consistent set of formulas }, 

—V(w v ) = (W w ,T,P\ wv ) where 
—W wv = {w v : V/N C [/}, 

-Fwv = {[0W '■ 0 e £ C }i where [<f>\ wv = {% £ W w : 0 £ £/}, 

—pi wv is sucl1 that PU([01#v) < PW([0]«v) if and onl y if (0 v 0) >0 e v, 

— 7 T (wy)(p) = true if and only if p £ V\ 


We want to show that PL is a qualitative plausibility structure and that (PL, wy) \= 
0 if and only if 0 £ V for all formulas 0 and worlds wy. 

We first need to establish that Pl u , v is well-defined, for all wy £ W. Let V 
be a maximal bc-consistent set. We need to show that if [0]™ v = [ <f>'] wv and 
[0]u,v = [ip']w v , then (0 V 0) >0 £ V if and only (0' V 0')—>0' £ V. 

We claim that [(f\ wv = [4>']w v if and only if V/N U {-<(0 <$■ 0')} is inconsistent. 
The “if” direction is obvious. For the “only if” direction, assume that P/lVU{->(0 <=> 
0')} is consistent. This implies that there is a maximal consistent set U such that 
A U {->(0 <t=> 0')} C U. Clearly, wu is in the symmetric difference between [4>] wv 
and [0 ]ii;y. Thus, [0]my 7 b [0 jmy. 

Now assume that \(j)\ wv = [4>']w v and [p] wv = W]w v ■ Therefore, as we have just 
shown, V/N U {-i(0 <t=> 0')} and V/N U {—>(0 0)} are both inconsistent. Thus, 
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there exists a formula S which is the conjunction of a finite number of formulas in 
V/N such that l~c S =>■ (0 ft) A (ip ip). Using part (b) of Lemma [A.6| , and 
the fact that if <p £ V/N, then N<j> £ V, we get that NS £ V. From parts (c) and 
(d) of Lemma we get that be NS => IV (0 <3- ft) A N(ip ft). Finally, using 
part (f) of Lemma M we get that 

be NS =>■ ((<p *ip) <=> (ft—^ft))- 


Thus, <p—yip £ V if and only if 0'—>0' £ V. This suffices to prove that Pl™ v is 
well-defined. 

To see that PL is a qualitative plausibility structure, first note that the definition 
of Pl™, v mirrors the construction in Lemma 4.1. It is easy to prove that the set of 
defaults (0—*-0 £ V} is closed under the KLM rules. Thus, we can immediately 
use the proof of Lemma 4.1 to show that (W wv , PL u;v .) is a plausibility space. The 
proof that PL satisfies A2 and A3 is identical to the proof of Theorem 5.4. Thus, 
PLeSQ pL . 

We next show that (PL, wy) |= tp if and only if <p £ V. This is done by induction 
on the structure of <p. The only case of interest is if (p is of the form 0'—>0. Here 
again the proof is identical to the proof of Lemma 4.1. The only difference is the 
use of axioms in system C instead of the corresponding rules in system P. 

Let £ be a bc-consistent formula. Using standard arguments, it is easy to 
show that there is some maximal bc-consistent set Vj such that £ £ Vj. Thus, 
(PL, wy .) 1= £, so £ is satisfiable in S// PL . □ 


Proposition 8.3. Let V C S® PL . C5 is valid in S if and only if all structures 
in S are rational. 


Proof. To prove the “if” direction it suffices to show that C5 is sound in rational 
qualitative structures. Let PL = (W,V,tt) be a rational qualitative plausibility 
structure. Assume that (PL,w) |= (0— *0) and (PL,w) |= ->(0 A £—»0). We 
need to prove that (PL,w) \= <p—>- ■£. If Pl™([0](p L] ™)) = -L, then (PL,w) \= 
0—*■->£ vacuously, and we are done. Now assume that P1™([0 ](pl,™)) > T. Let 
A = [ <P](pl,w), B = [0](p L ,™), and C = [£J(pl,™)- Since (PL,w) (= (p^ip, we 
have that P1™(A D B) > P1™(A n B). Since PI™ satisfies A5, we have that either 
PI™(A nBnC) > PI™(A fl B ) or PI™(A fl B n C) > PI™(A n B). However, since 
(PL,w) \= ->(0 A ^ -ip), we have that P1™(A flBnC) ^ PI™ (A n B fl C). This 
implies that 

Pi™(AnHnU) ^ Pi™(AnH). (5) 

Thus, we conclude that 

PU(AnBnC) > Pi™(AnH). (6) 

Applying A4 with (|j) as the antecedent, we get that either PI™(A fl B fl C) > 
PI™(A C\B) or PI™(A CiBnC) > PI™ (A nBflC). Since the former contradicts (||), 
we conclude that Pl™(AnHnC') > Pl™(AnHnC). Using Al, A2, and (||), we get 
that Pi™ (An c) > PL(AnBnC) > Pi™ ((A nun c) u (Ann)) > Pi™(Anu). 
Thus, (PL, w) |= 0—►->£. 

To prove the “only if” direction, we have to show that if there is some PL = 
(W, V, 7r) in S that is not rational, then C5 is violated. 
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Suppose that PL does not satisfy A4. Since we have assumed that T w = 

{101 (pl,™) ; 4> G £}, there is a world w, and formulas 0 , 0 , and £ such that [01 (pl,™), 
[01(pl,™), and K1 (pl,™) are pairwise disjoint, P1™([0 ](pl,™)) > Pl™ ([0 ](pl,™)), and 
yet Pl™([£J (pl,™)) 0 P1^(['0](pl,™)) and PI™([£J(pl,™)) Pl™ ([01 (pl,™))- Since 

Pl™ ([01 (pl,™)) > PU([01(pl,™)), we have that P1™([0 V£](pl,™)) > Pl™ ([01 (pl,™))- 
Thus, {PL,w) h (0V0V£)^“'0- Moreover, since PI™([C](pl,™)) 0 P1™([0](pl,™)), 
we have that P1 ™([£](pl,™)) > -L. Since we also have that P1 ™([£](pl,™)) ^ 
P1™([01(pl,™))> we conclude that (PL, w) \= ->((£V0)—»-<0). Finally, since PI™([0 ] ( pl,™)) 0 
PI™([C](pl,™)), we have that P1™([0 ] ( pl,™)) 0 Pl™([£ V0 ](pl,™))- Thus, {PL,w) \= 

->((0 V 0 V £)—►-■ (ip V ^)). Define a as 0 as 0 V £ and 7 as -,0. We have 

just proved that (PL,w) \= (a— > 7 ) A -i(a—*-i0) A ->(a A /?—> 7 ), which contradicts 
C5. 

Now suppose that PL does not satisfy A5. Then there is a world w, and formu¬ 
las 0 , 0 , and £, such that [ 0 ](pl,™), [ 01 (pl,™), and [C 1 (pl,™) are pairwise disjoint, 

P1™([0 V ipi(PL,w)) > PI™(K1 (PL,™)), and yet Pl™ ([01 (pl,™)) 0 P1™(K1(pl,™)) and 
Pl™ ([01 (pl,™)) 0 PI™([£] (PL,™))- Since P1™([0 V 0](pl,™)) > P1™([£](pl,™)) ^ 
either P1™([0](pl,™)) > T or P1™([0](pl,™)) > -L, for otherwise, using A3 we 
would get that P1™([0 V 01 (pl,™)) = T. Without loss of generality, we assume 
that PI™(M (pl,™)) > T. Since P1™([0 V 0] (pl,™)) > P1™(K1(pl,™)), we have 
that (PL,w) |= (0 V 0 V £)—»Since P1™([0] ( pl,™)) > -L and Pl™ ([01 (pl,™)) 0 
P1™(K1 (pl,™)), we have that (PL,w) \= -<(0V£)— >— 0- Finally, since P1™([0](pl,™)) 0 
P1™(K1 (pl,™)), we have that Pl™([01 ( pl,™)) 0 P1™([0V£] ( pl,™)), and thus (PL,u>) (= 

->((0 V 0 V £)—>0)). Define a as 0 V 0 V £, 0 as -,0 and 7 as We have proved 
that ( PL,w) \= (a— > 7 ) A -i(q—>—A /?—^ 7 ), which contradicts C5. □ 


We next want to prove Theorem 8.4. We first need a lemma. 


Lemma A.7. Let (W, Pl) be a qualitative plausibility space, and let <* be a binary 
relation on subsets of W such that A <* B if there is some set C C W such that 
AnC = V) and P1(A) < P1(C) < P1(P). Then 


(a) <* is a strict order; that is irreflexive, transitive and anti-symmetric, 

(b) if Afl B = 0, then A <* B if and only if P1(A) < P1(P), 

(c) if Pl is rational, then <* is modular, and 

(d) if Pl is rational and A <* (A U B), then B <£* (4UB). 

Proof. We start with part (a). The definition of <* implies that A <* B only 
if P1(A) < P1(B). Thus, we get that <* is irreflexive and anti-symmetric. We now 
show that <* is transitive. Assume that A <* B and B <* C. Since A <* B , 
there is a set D such that A n D = 0, and P1(A) < P1(P>) < P1(P). Moreover, 
since B <* C, we have that P1(P) < P1(C). Thus, we get that P1(D) < P1(C), and 
hence A <* C. 

For part (b), let A and B be disjoint sets. If P1(A) < P1(P), then A <* B using 
the set C = B. On the other hand, if A <* B, then P1(A) < Pl(-B). 

For part (c), assume that Pl is rational, and that A <* B. Let C C W. We 
have to show that either A <* C or C <* B. Since A <* B , there is a set D 
such that A n D = 0 and P1(A) < Pl(-D) < P1(P). Since D is the disjoint union 
of ( D (~l C) and D — C, we can apply A5 and get that either P1(A) < P1(D fl C) 
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or P1(A) < P1(D - C). If P1(A) < P1(D n C), then since P1(D flC)< P1(C), 
we get that A <* C and we are done. If P1(A) < P1(D — C), since A, D — C 
and C — A are pairwise disjoint, we get from A4 that either P1(A) < P1(C — A) or 
P1(C — A) < P1(D — C). If P1(A) < P1(C — A), we again get that A <* C and we are 
done. IfPl(C — A) < P1(D —C), using A2, we get that P1((C —A)uA) < P1(D — C). 
We conclude that Pl(C') < P1(D — C). Since P1(D — C) < P1(D) < P1(B), we get 
that C <* B. 

Finally, we prove part (d). Assume that A <* (AuB). Without loss of generality, 
we can also assume that B n A = 0 (if not, replace B by B — A). We want to show 
that B yF (A U B). By way of contradiction, assume that B <* (A U B). Since 
A <* B , there is a set C such that A n C = 0 and P1(A) < P1(C) < P1(A U B). 
Since C C (C — B) U B, this implies that P1(A) < P1((C — B) U B). Since A, B, 
and C — B are pairwise disjoint, we can apply A5 to get that either P1(A) < P1(B) 
or P1(A) < P1(C — B). If P1(A) < P1(B), since we assumed that B <* (A U B), 
there is a set D such that DC\B = 0 and P1(B) < P1(B) < Pl(AUB). This implies 
that P1(B) < P1((B — A) U B). Moreover, since P1(A) < P1(B), we also have that 
P1(A) < P1((B — A) UB). Since A, B and D — A are pairwise disjoint, we can apply 
A2 to get that Pl(AUB) < P1(B —A) < P1(D). But this contradicts the assumption 
that P1(B) < Pl(AUB). If P1(A) < P1(C —B), since A, B, and C — B are pairwise 
disjoint, we have by A4 that either P1(A) < P1(B) or P1(B) < P1(C — B). We 
have already seen that if P1(A) < P1(B) we get a contradiction. Now assume that 
P1(B) < P1(C — B). Then, since we also have that P1(A) < P1(C — B), we can 
apply A2 to get that P1(A U B) < P1(C — B) < Pl(C'). But this contradicts our 
assumption that P1(C) < P1(A U B). Thus, we must have B yA (A U B). □ 


Theorem SA. //(IT,PI) be a rational qualitative plausibility space, then there 
is a default-equivalent plausibility space (W, P/) such that Pl ; is a ranking. 


Proof. Let <* be the relation defined in Lemma [A.7| . Define a relation ss* 
on sets such that A B if neither A <* B nor B <* A. Since <* is modular, 
standard (and straightforward) arguments show that sa* is an equivalence relation. 
We construct a new plausibility measure based on these two ordering. Let T /«* 
be the set of equivalence classes of measurable sets. Let <* be the the total order 
on J-1 «* induced by <*. Let PI 7 be a plausibility measure on T whose range is 
T/ «*, defined so that PI 7 (A) = [A] where [A] is the equivalence class containing 
A. We have to show that PI 7 is a plausibility measure. Assume that A C B. 
Then P1(A) < P1(B) and clearly B -ft* A. Thus, either A <* B or A B. We 
conclude that P1 7 (A) < P1 7 (B), as desired. Since <* is a total order, PI 7 satisfies 
A4 7 . Using Lemma 0(d), we get that P1 7 (AUB) = max(Pl 7 (A), P1 7 (B)). Thus, 
PI 7 also satisfies A5 7 , and hence is a ranking. Finally, we have to show that (W, PI 7 ) 
is default-equivalent to (IF,PI). Let A and B be disjoint events. By Lemma A.7, 
A <* B if and only if P1(A) < P1(B). Thus, we conclude that P1 7 (A) < P1 7 (B) if 
and only if P1(A) < P1(B). □ 

We now prove Theorem ^. l| . We actually prove some more general results. Con¬ 
sider the following two restrictions on plausibility structures: 


R. Pl w is rational for all worlds w. 
N. Ply, in normal for all worlds w. 
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Theorem A.8. Let <f £ C c , let A be a subset of {R, N}, and let A be the 
corresponding subset of {C5, C6}. Then <f is valid in subset of S® PL that satisfies 
A if and only if (f is provable from system C +A. 


Proof. Again, we focus on completeness. We obtain completeness in each case 
by modifying the proof of Theorem We construct a canonical model as in 
that proof, checking consistency with the extended axiom system. The resulting 
structure has the property that ( PL,wy ) 1= <f if and only if </> £ V. We just need 
to show that this structure also satisfies the corresponding semantic restrictions. 

If C5 is included as an axiom, then C5 is valid in PL. Using Proposition 8.3 we 
get that PL is rational. 

If C6 is included as an axiom and PL is not normal, then there is some world 
w v where PI w v (l true i(PL,w v )) = ?W ilf alse l(PL,w v ))- We get that ( PL,w v ) \= 
true —► false, which contradicts C6. □ 


Lemma A. 9. Let (f £ C c and let A be a subset of { R , N }. If < f > is satisfiable in 
a structure satisfying A, it is satisfiable in a finite structure satisfying A. 

Proof. Let <f £ C c and let PL = (W,V,n) be a structure satisfying A such 
that (PL, w) \= (j> for some w £ W. We now construct a finite structure PL' that 
satisfies cf. The key idea is that when evaluating cf we only examine subformulas of 
cf. Thus, we are interested in distinguishing only between worlds that differ in the 
evaluation of some subformula of cf. 

We now make this argument precise. Let Sub(cf ) be the set of subformulas of 
cf. We partition W into equivalence classes: For w £ W, define [w] = {w' £ W : 
Vif £ Sub(<j> ), ( PL,w ) |= if if and only if ( PL,w') |= if}. Thus, [w] contains all the 
worlds that are indistinguishable, for the purpose of evaluating cf, from w. We 
now choose, arbitrarily, a representative world w £ [u>] for each equivalence class. 
These definitions extend to sets of worlds: For A C W, define [A] = and 

A = {ui : w £ A}. 

We construct PL' as follows. We set W' = W. Clearly W' is finite, since there are 
only a finite number of subformulas of <f>. Let tt' be the restriction of n to W', and let 
'P'(w)(Wf ) , PlJj), where = W&, and Plb is defined so that Pl^(A') < P1 M -,(U') 

if P4([i4'] n w*,) < PU([s'] n w*). 

We need show that PL' is a qualitative plausibility structure. This is easy to 
prove since [•] preserves subsets, unions, and disjointness of sets: if A' C B ', then 
[A'} C [£']; [A' U B'\ = [A'] U [£']; and [A' n B'] = [A'] n \B']. 

Next, we need to show that if (PL, w) \= (f>, then (PL', w) |= </>. In fact, we prove 
this property for every subformula if of < f . The proof is by induction on the structure 
of of if. The only case of interest is for conditional formulas V’—G Sub(<f). This 
case follows easily once we notice that if the induction hypothesis holds for if, then 
[M(Pi',i&)] C Ww = \if\pL,w) n Ww- 

Finally, we have to show that if PL is rational or normal, then so is PL'. Again, 
this follows easily from the properties of [•]. □ 


Lemma A. 10. Let (W,P, PI) be a rational and normal qualitative plausibility 
space such that T is finite. Then there is a n-ranking k on W and a possibility 
measure Poss on W such that for all disjoint A, B £ T , P1(A) > Pl(-B) if and only 
if k(A) < k(B) and P1(A) > Pl(-B) if and only if Poss(A) > Poss(B). 
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Proof. By Theorem 3.4, there is a ranked plausibility space {W,3-, PL) such 
that PI' is default-equivalent to PI. Since T is finite, the set {d : 3A £ F, PI'(A) = 
d} is finite. Moreover, since Pf is a ranking, this set is totally ordered. Let 
do > d\ > ... > d n be an ordered enumeration of this set of values. 

Let k be a tc-ranking such that k(A) = k if Pi/(A.) = dk > - L and k(A) = oo if 
Pl^A) = _L. Similarly, let Poss be a possibility measure such that Poss(A) = 1 — k/n 
if Pl^A) = dfc > _L and Poss(A) = 0 if Pl^A) = _L. It easy to see that since Pl ; 
is a ranking, we get that n(A U B) = min(K(A), k(B)) and that Poss(A U B) = 
max(Poss(A), Poss(-B)). It is also easy to see that both measures are equivalent to 
PI' and thus default-equivalent to PL □ 


Theorem |S.6| . (a) C +{C6\ is a sound and complete axiomatization of S^. 

(b) C +{C5, C6 } is a sound and complete axiomatization of Sf and Sff oss . 


Proof. Part (a) is an immediate corollary of Theorems 6.3 and A.8 


For Part (b), as usual, it is easy to verify soundness. For completeness, it suffices 
to show that if <p is consistent with system C+{C5,C6}, then it is satisfiable i n Sf 
and S^ oss . Suppose that </> is consistent with system C+{C5,C6}. By Theorem A.8 , 
< f> is satisfiable in a rational and normal structure in S^ PL . By Lemma A.9 


we can 

assume that this structure is finite. The result now follows from Lemma |A. 10. □ 
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